./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor887135037 <...> [ 29.555773][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.573188][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 42.575118][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 42.575135][ T27] audit: type=1400 audit(1658893431.593:73): avc: denied { transition } for pid=3535 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.620002][ T27] audit: type=1400 audit(1658893431.603:74): avc: denied { write } for pid=3535 comm="sh" path="pipe:[27992]" dev="pipefs" ino=27992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.46' (ECDSA) to the list of known hosts. execve("./syz-executor887135037", ["./syz-executor887135037"], 0x7ffc703a0830 /* 10 vars */) = 0 brk(NULL) = 0x555556500000 brk(0x555556500c40) = 0x555556500c40 arch_prctl(ARCH_SET_FS, 0x555556500300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555565005d0) = 3609 set_robust_list(0x5555565005e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f5745cd6440, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f5745cd6b10}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f5745cd64e0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5745cd6b10}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor887135037", 4096) = 27 brk(0x555556521c40) = 0x555556521c40 brk(0x555556522000) = 0x555556522000 mprotect(0x7f5745d97000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565005d0) = 3610 ./strace-static-x86_64: Process 3610 attached [pid 3610] set_robust_list(0x5555565005e0, 24) = 0 [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3610] setpgid(0, 0) = 0 [pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1000", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745ca6000 [pid 3610] mprotect(0x7f5745ca7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f5745cc63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3611], tls=0x7f5745cc6700, child_tidptr=0x7f5745cc69d0) = 3611 [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3611 attached [pid 3611] set_robust_list(0x7f5745cc69e0, 24) = 0 [pid 3611] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] <... futex resumed>) = 0 [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... futex resumed>) = 1 [ 52.478490][ T27] audit: type=1400 audit(1658893441.503:75): avc: denied { execmem } for pid=3609 comm="syz-executor887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.499401][ T27] audit: type=1400 audit(1658893441.523:76): avc: denied { read } for pid=3610 comm="syz-executor887" name="nbd0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 3611] ioctl(3, NBD_SET_SOCK, 4 [pid 3610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3610] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745c85000 [pid 3610] mprotect(0x7f5745c86000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f5745ca53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3612], tls=0x7f5745ca5700, child_tidptr=0x7f5745ca59d0) = 3612 [pid 3610] futex(0x7f5745d9d4f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f5745d9d4fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3612 attached [pid 3612] set_robust_list(0x7f5745ca59e0, 24) = 0 [pid 3611] <... ioctl resumed>) = 0 [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3612] dup(4) = 6 [pid 3612] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] <... futex resumed>) = 0 [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = 0 [pid 3610] <... futex resumed>) = 1 [pid 3611] ioctl(3, NBD_SET_SOCK, 6 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3612] <... futex resumed>) = 1 [ 52.523613][ T27] audit: type=1400 audit(1658893441.523:77): avc: denied { open } for pid=3610 comm="syz-executor887" path="/dev/nbd0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.548129][ T27] audit: type=1400 audit(1658893441.523:78): avc: denied { ioctl } for pid=3610 comm="syz-executor887" path="/dev/nbd0" dev="devtmpfs" ino=660 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 3612] futex(0x7f5745d9d4f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3611] <... ioctl resumed>) = 0 [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3611] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3611] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3610] <... futex resumed>) = 0 [pid 3611] <... openat resumed>) = 7 [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3611] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3610] <... futex resumed>) = 0 [pid 3611] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... ioctl resumed>) = 0 [pid 3611] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3611] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3610] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3610] <... futex resumed>) = 0 [pid 3611] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3610] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... openat resumed>) = 8 [pid 3611] write(8, "13", 2) = 2 [pid 3611] ioctl(7, NBD_DO_IT [pid 3610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 52.661484][ T3611] Increasing nr_hw_queues to 2 fails, fallback to 1 [pid 3610] exit_group(0) = ? [pid 3612] <... futex resumed>) = ? [pid 3611] <... ioctl resumed>) = ? [pid 3612] +++ exited with 0 +++ [pid 3611] +++ exited with 0 +++ [pid 3610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3610, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached , child_tidptr=0x5555565005d0) = 3616 [pid 3616] set_robust_list(0x5555565005e0, 24) = 0 [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745ca6000 [pid 3616] mprotect(0x7f5745ca7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f5745cc63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3617 attached [pid 3617] set_robust_list(0x7f5745cc69e0, 24) = 0 [pid 3617] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... clone resumed>, parent_tid=[3617], tls=0x7f5745cc6700, child_tidptr=0x7f5745cc69d0) = 3617 [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] <... futex resumed>) = 0 [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3617] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] <... futex resumed>) = 0 [pid 3617] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... socketpair resumed>[4, 5]) = 0 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = 0 [pid 3617] <... futex resumed>) = 1 [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] ioctl(3, NBD_SET_SOCK, 4 [pid 3616] <... futex resumed>) = 0 [ 52.810640][ T3611] block nbd0: shutting down sockets [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] dup(4 [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... dup resumed>) = 6 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] ioctl(3, NBD_SET_SOCK, 6 [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3617] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = 1 [pid 3617] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... openat resumed>) = 7 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] <... futex resumed>) = 0 [pid 3617] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... ioctl resumed>) = 0 [pid 3617] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3616] <... futex resumed>) = 0 [pid 3617] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3616] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... openat resumed>) = 8 [pid 3617] write(8, "13", 2) = 2 [pid 3617] ioctl(7, NBD_DO_IT [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3616] exit_group(0) = ? [pid 3617] <... ioctl resumed>) = ? [pid 3617] +++ exited with 0 +++ [pid 3616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565005d0) = 3618 ./strace-static-x86_64: Process 3618 attached [pid 3618] set_robust_list(0x5555565005e0, 24) = 0 [pid 3618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3618] setpgid(0, 0) = 0 [pid 3618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3618] write(3, "1000", 4) = 4 [pid 3618] close(3) = 0 [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745ca6000 [pid 3618] mprotect(0x7f5745ca7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3618] clone(child_stack=0x7f5745cc63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3619], tls=0x7f5745cc6700, child_tidptr=0x7f5745cc69d0) = 3619 ./strace-static-x86_64: Process 3619 attached [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] set_robust_list(0x7f5745cc69e0, 24 [pid 3618] <... futex resumed>) = 0 [ 53.117849][ T3617] block nbd0: shutting down sockets [pid 3619] <... set_robust_list resumed>) = 0 [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3618] <... futex resumed>) = 0 [pid 3619] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] <... socketpair resumed>[4, 5]) = 0 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... futex resumed>) = 0 [pid 3618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3619] ioctl(3, NBD_SET_SOCK, 4 [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3618] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 3619] <... ioctl resumed>) = 0 [pid 3618] <... mmap resumed>) = 0x7f5745c85000 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3618] mprotect(0x7f5745c86000, 131072, PROT_READ|PROT_WRITE [pid 3619] <... futex resumed>) = 0 [pid 3618] <... mprotect resumed>) = 0 [pid 3619] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] clone(child_stack=0x7f5745ca53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3620 attached , parent_tid=[3620], tls=0x7f5745ca5700, child_tidptr=0x7f5745ca59d0) = 3620 [pid 3620] set_robust_list(0x7f5745ca59e0, 24) = 0 [pid 3620] futex(0x7f5745d9d4f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] futex(0x7f5745d9d4f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3620] <... futex resumed>) = 0 [pid 3618] futex(0x7f5745d9d4fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3620] dup(4) = 6 [pid 3620] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3618] <... futex resumed>) = 0 [pid 3620] futex(0x7f5745d9d4f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3618] <... futex resumed>) = 1 [pid 3619] ioctl(3, NBD_SET_SOCK, 6 [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... ioctl resumed>) = 0 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3618] <... futex resumed>) = 0 [pid 3619] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3618] <... futex resumed>) = 0 [pid 3619] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... openat resumed>) = 7 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3618] <... futex resumed>) = 0 [pid 3619] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3618] <... futex resumed>) = 0 [pid 3619] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... ioctl resumed>) = 0 [pid 3619] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3618] <... futex resumed>) = 0 [pid 3619] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3618] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3618] <... futex resumed>) = 0 [pid 3619] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3618] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3619] <... openat resumed>) = 8 [pid 3619] write(8, "13", 2) = 2 [pid 3619] ioctl(7, NBD_DO_IT [pid 3618] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3618] exit_group(0 [pid 3620] <... futex resumed>) = ? [pid 3618] <... exit_group resumed>) = ? [pid 3620] +++ exited with 0 +++ [pid 3619] <... ioctl resumed>) = ? [pid 3619] +++ exited with 0 +++ [pid 3618] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3618, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565005d0) = 3621 ./strace-static-x86_64: Process 3621 attached [pid 3621] set_robust_list(0x5555565005e0, 24) = 0 [pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3621] setpgid(0, 0) = 0 [pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3621] write(3, "1000", 4) = 4 [ 53.444623][ T3619] block nbd0: shutting down sockets [pid 3621] close(3) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745ca6000 [pid 3621] mprotect(0x7f5745ca7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3621] clone(child_stack=0x7f5745cc63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3622 attached , parent_tid=[3622], tls=0x7f5745cc6700, child_tidptr=0x7f5745cc69d0) = 3622 [pid 3622] set_robust_list(0x7f5745cc69e0, 24) = 0 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... openat resumed>) = 3 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... socketpair resumed>[4, 5]) = 0 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] dup(4) = 6 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3621] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] ioctl(3, NBD_SET_SOCK, 6) = 0 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... openat resumed>) = 7 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE) = 0 [pid 3622] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3621] <... futex resumed>) = 0 [pid 3622] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3621] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3621] <... futex resumed>) = 0 [pid 3622] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3621] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3622] <... openat resumed>) = 8 [pid 3622] write(8, "13", 2) = 2 [pid 3622] ioctl(7, NBD_DO_IT [pid 3621] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 53.585850][ T3622] debugfs: out of free dentries, can not create file 'tasks' [pid 3621] exit_group(0) = ? [pid 3622] <... ioctl resumed>) = ? [pid 3622] +++ exited with 0 +++ [pid 3621] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3621, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565005d0) = 3623 ./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x5555565005e0, 24) = 0 [pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3623] setpgid(0, 0) = 0 [pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3623] write(3, "1000", 4) = 4 [pid 3623] close(3) = 0 [ 53.766953][ T3622] block nbd0: shutting down sockets [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745ca6000 [pid 3623] mprotect(0x7f5745ca7000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3623] clone(child_stack=0x7f5745cc63f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3624 attached , parent_tid=[3624], tls=0x7f5745cc6700, child_tidptr=0x7f5745cc69d0) = 3624 [pid 3624] set_robust_list(0x7f5745cc69e0, 24 [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... set_robust_list resumed>) = 0 [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3624] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... socketpair resumed>[4, 5]) = 0 [pid 3624] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] ioctl(3, NBD_SET_SOCK, 4 [pid 3623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3623] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5745c85000 [pid 3623] mprotect(0x7f5745c86000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3623] clone(child_stack=0x7f5745ca53f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3625 attached , parent_tid=[3625], tls=0x7f5745ca5700, child_tidptr=0x7f5745ca59d0) = 3625 [pid 3625] set_robust_list(0x7f5745ca59e0, 24 [pid 3623] futex(0x7f5745d9d4f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] <... set_robust_list resumed>) = 0 [pid 3623] futex(0x7f5745d9d4fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] dup(4) = 6 [pid 3625] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3625] ioctl(3, NBD_SET_SOCK, 6 [pid 3623] futex(0x7f5745d9d4f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3623] futex(0x7f5745d9d4fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = 0 [pid 3623] <... futex resumed>) = 1 [pid 3625] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 3624] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... openat resumed>) = 7 [pid 3625] futex(0x7f5745d9d4fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3624] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3625] futex(0x7f5745d9d4f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] <... futex resumed>) = 0 [pid 3624] ioctl(7, NBD_SET_FLAGS, NBD_FLAG_HAS_FLAGS|NBD_FLAG_READ_ONLY|NBD_FLAG_SEND_FLUSH|NBD_FLAG_SEND_FUA|NBD_FLAG_ROTATIONAL|NBD_FLAG_SEND_TRIM|NBD_FLAG_SEND_WRITE_ZEROES|NBD_FLAG_SEND_DF|NBD_FLAG_CAN_MULTI_CONN|NBD_FLAG_SEND_RESIZE [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... ioctl resumed>) = 0 [pid 3624] futex(0x7f5745d9d4ec, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... futex resumed>) = 0 [pid 3624] futex(0x7f5745d9d4e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3623] futex(0x7f5745d9d4e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3623] <... futex resumed>) = 0 [pid 3624] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3624] <... openat resumed>) = 8 [pid 3624] write(8, "13", 2) = 2 [ 53.927264][ T3625] block nbd0: Device being setup by another task [ 53.977770][ T3624] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 53.989503][ T3624] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 53.997937][ T3624] CPU: 0 PID: 3624 Comm: syz-executor887 Not tainted 5.19.0-rc8-syzkaller-00003-g5de64d44968e #0 [ 54.008525][ T3624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 54.018579][ T3624] RIP: 0010:blk_mq_free_rqs+0x3f8/0x960 [ 54.024145][ T3624] Code: de e8 0c fb 8f fd 83 fb 3f 0f 87 63 38 58 05 e8 be fe 8f fd b8 00 10 00 00 89 d9 48 d3 e0 4c 01 e8 48 89 44 24 08 48 8b 04 24 <0f> b6 00 84 c0 74 08 3c 03 0f 8e 96 03 00 00 41 8b 1f 31 ff 31 ed [ 54.043739][ T3624] RSP: 0018:ffffc90003067aa8 EFLAGS: 00010286 [ 54.049797][ T3624] RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 54.057755][ T3624] RDX: ffff88807cf46000 RSI: ffffffff83e99e52 RDI: 0000000000000005 [ 54.065714][ T3624] RBP: ffff888020b68000 R08: 0000000000000005 R09: 000000000000003f [ 54.073688][ T3624] R10: 0000000000000004 R11: 0000000000000001 R12: ffffc90003067b60 [ 54.081655][ T3624] R13: ffff88801e6f0000 R14: ffff88801e646000 R15: 0000000000000000 [ 54.089614][ T3624] FS: 00007f5745cc6700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 54.098559][ T3624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.105141][ T3624] CR2: 00007f5745d81aa3 CR3: 0000000021a6a000 CR4: 00000000003506f0 [ 54.113112][ T3624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.121098][ T3624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.129077][ T3624] Call Trace: [ 54.132356][ T3624] [ 54.135294][ T3624] ? _raw_spin_unlock_irq+0x1f/0x40 [ 54.140504][ T3624] blk_mq_sched_free_rqs+0x1d4/0x250 [ 54.145802][ T3624] ? blk_mq_sched_insert_requests+0x9a0/0x9a0 [ 54.151878][ T3624] ? kobject_put+0xb9/0x540 [ 54.156383][ T3624] ? kobject_del+0x44/0x60 [ 54.160802][ T3624] elevator_switch_mq+0xc2/0x6c0 [ 54.165737][ T3624] blk_mq_update_nr_hw_queues+0x3ee/0xdf0 [ 54.171460][ T3624] ? blk_mq_init_queue+0x140/0x140 [ 54.176582][ T3624] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 54.182391][ T3624] nbd_start_device+0x153/0xc30 [ 54.187238][ T3624] ? security_capable+0x8f/0xc0 [ 54.192126][ T3624] nbd_ioctl+0x5a5/0xbd0 [ 54.196368][ T3624] ? blkdev_bszset+0x1f0/0x1f0 [ 54.201146][ T3624] ? nbd_start_device+0xc30/0xc30 [ 54.206168][ T3624] ? find_held_lock+0x2d/0x110 [ 54.210941][ T3624] ? ptrace_notify+0xfa/0x140 [ 54.215612][ T3624] ? nbd_start_device+0xc30/0xc30 [ 54.220636][ T3624] blkdev_ioctl+0x36e/0x800 [ 54.225141][ T3624] ? blkdev_common_ioctl+0x1a50/0x1a50 [ 54.230602][ T3624] ? selinux_file_ioctl+0xb1/0x270 [ 54.235710][ T3624] ? blkdev_common_ioctl+0x1a50/0x1a50 [ 54.241170][ T3624] __x64_sys_ioctl+0x193/0x200 [ 54.245935][ T3624] do_syscall_64+0x35/0xb0 [ 54.250350][ T3624] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.256251][ T3624] RIP: 0033:0x7f5745d19329 [ 54.260664][ T3624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.280267][ T3624] RSP: 002b:00007f5745cc62e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.288675][ T3624] RAX: ffffffffffffffda RBX: 00007f5745d9d4e0 RCX: 00007f5745d19329 [ 54.296656][ T3624] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 54.304622][ T3624] RBP: 00007f5745d6a194 R08: 0000000000000002 R09: 0000000000003331 [ 54.312595][ T3624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5745d9d4ec [ 54.320561][ T3624] R13: 00007f5745cc62f0 R14: 00007f5745d9d4e8 R15: 0000000000000002 [pid 3624] ioctl(7, NBD_DO_IT [pid 3623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3623] futex(0x7f5745d9d4ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3623] exit_group(0) = ? [pid 3625] <... futex resumed>) = ? [pid 3625] +++ exited with 0 +++ [ 54.328533][ T3624] [ 54.331549][ T3624] Modules linked in: [ 54.336115][ T3624] ---[ end trace 0000000000000000 ]--- [ 54.341759][ T3624] RIP: 0010:blk_mq_free_rqs+0x3f8/0x960 [ 54.347418][ T3624] Code: de e8 0c fb 8f fd 83 fb 3f 0f 87 63 38 58 05 e8 be fe 8f fd b8 00 10 00 00 89 d9 48 d3 e0 4c 01 e8 48 89 44 24 08 48 8b 04 24 <0f> b6 00 84 c0 74 08 3c 03 0f 8e 96 03 00 00 41 8b 1f 31 ff 31 ed [ 54.367197][ T3624] RSP: 0018:ffffc90003067aa8 EFLAGS: 00010286 [ 54.373708][ T3624] RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 54.382185][ T3624] RDX: ffff88807cf46000 RSI: ffffffff83e99e52 RDI: 0000000000000005 [ 54.390226][ T3624] RBP: ffff888020b68000 R08: 0000000000000005 R09: 000000000000003f [ 54.398270][ T3624] R10: 0000000000000004 R11: 0000000000000001 R12: ffffc90003067b60 [ 54.406235][ T3624] R13: ffff88801e6f0000 R14: ffff88801e646000 R15: 0000000000000000 [ 54.414239][ T3624] FS: 00007f5745cc6700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 54.423215][ T3624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.429833][ T3624] CR2: 00007f5745d81aa3 CR3: 0000000021a6a000 CR4: 00000000003506f0 [ 54.437873][ T3624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.445845][ T3624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.453867][ T3624] Kernel panic - not syncing: Fatal exception [ 54.460110][ T3624] Kernel Offset: disabled [ 54.464430][ T3624] Rebooting in 86400 seconds..