./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3720842360
<...>
forked to background, child pid 3185
no interfaces have a carrier
[ 25.913135][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 25.924423][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts.
execve("./syz-executor3720842360", ["./syz-executor3720842360"], 0x7ffd9ac567a0 /* 10 vars */) = 0
brk(NULL) = 0x55555742e000
brk(0x55555742ec40) = 0x55555742ec40
arch_prctl(ARCH_SET_FS, 0x55555742e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3720842360", 4096) = 28
brk(0x55555744fc40) = 0x55555744fc40
brk(0x555557450000) = 0x555557450000
mprotect(0x7f93f5c9d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555742e5d0) = 3607
./strace-static-x86_64: Process 3607 attached
[pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3607] setpgid(0, 0) = 0
[pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3607] write(3, "1000", 4) = 4
[pid 3607] close(3) = 0
[pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3
[pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 4
[pid 3607] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 5
[pid 3607] socketpair(AF_TIPC, SOCK_SEQPACKET, 0, [6, 7]) = 0
[pid 3607] ioctl(5, NBD_SET_SOCK, 6) = 0
[pid 3607] ioctl(3, NBD_SET_SIZE_BLOCKS, 17) = 0
syzkaller login: [ 49.599268][ T3607] nbd0: detected capacity change from 0 to 34
[pid 3607] ioctl(4, NBD_DO_IT <unfinished ...>
[pid 3606] kill(-3607, SIGKILL) = 0
[pid 3607] <... ioctl resumed>) = ?
[pid 3606] kill(3607, SIGKILL) = 0
[ 54.562564][ T3607] block nbd0: shutting down sockets
[pid 3606] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 3606] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
[pid 3606] getdents64(3, 0x55555742f620 /* 2 entries */, 32768) = 48
[pid 3606] getdents64(3, 0x55555742f620 /* 0 entries */, 32768) = 0
[pid 3606] close(3) = 0
[ 76.248111][ T14] cfg80211: failed to load regulatory.db
[ 80.086519][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 30 seconds
[ 110.166599][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 60 seconds
[ 111.251893][ T2972] udevd[2972]: worker [3609] /devices/virtual/block/nbd0 is taking a long time
[ 140.246548][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 90 seconds
[ 170.326543][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 120 seconds
[ 200.406538][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 150 seconds
[ 230.486555][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 180 seconds
[ 231.416063][ T2972] udevd[2972]: worker [3609] /devices/virtual/block/nbd0 timeout; kill it
[ 231.424814][ T2972] udevd[2972]: seq 7461 '/devices/virtual/block/nbd0' killed
[ 260.566555][ T9] block nbd0: Possible stuck request ffff88801e820000: control (read@0,4096B). Runtime 210 seconds
[ 286.166627][ T28] INFO: task syz-executor372:3607 blocked for more than 143 seconds.
[ 286.174834][ T28] Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0
[ 286.182514][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 286.191262][ T28] task:syz-executor372 state:D stack:25984 pid: 3607 ppid: 3606 flags:0x00004006
[ 286.200556][ T28] Call Trace:
[ 286.203841][ T28] <TASK>
[ 286.206815][ T28] __schedule+0x957/0xe20
[ 286.211261][ T28] ? release_firmware_map_entry+0x184/0x184
[ 286.217180][ T28] ? __mutex_trylock_common+0x8e/0x2f0
[ 286.222692][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 286.227952][ T28] schedule+0xcb/0x190
[ 286.232046][ T28] schedule_preempt_disabled+0xf/0x20
[ 286.237516][ T28] __mutex_lock_common+0xecf/0x26c0
[ 286.242739][ T28] ? blkdev_put+0x100/0x730
[ 286.247425][ T28] ? mutex_lock_io_nested+0x60/0x60
[ 286.252637][ T28] ? __fsnotify_parent+0x4fd/0x710
[ 286.257831][ T28] ? blkdev_open+0x2e0/0x2e0
[ 286.262601][ T28] mutex_lock_nested+0x17/0x20
[ 286.267407][ T28] blkdev_put+0x100/0x730
[ 286.271750][ T28] ? blkdev_open+0x2e0/0x2e0
[ 286.276332][ T28] blkdev_close+0x55/0x80
[ 286.280710][ T28] __fput+0x3b9/0x820
[ 286.284728][ T28] task_work_run+0x146/0x1c0
[ 286.289372][ T28] do_exit+0x55e/0x20a0
[ 286.293568][ T28] ? mm_update_next_owner+0x6d0/0x6d0
[ 286.298984][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 286.304982][ T28] ? print_irqtrace_events+0x220/0x220
[ 286.310498][ T28] ? _raw_spin_lock_irq+0xdb/0x110
[ 286.315629][ T28] do_group_exit+0x23b/0x2f0
[ 286.320263][ T28] ? _raw_spin_unlock_irq+0x1f/0x40
[ 286.325469][ T28] ? lockdep_hardirqs_on+0x95/0x140
[ 286.330724][ T28] get_signal+0x172f/0x1780
[ 286.335290][ T28] ? ptrace_notify+0x340/0x340
[ 286.340091][ T28] ? do_raw_spin_unlock+0x134/0x8a0
[ 286.345297][ T28] arch_do_signal_or_restart+0x8d/0x750
[ 286.350930][ T28] ? _raw_spin_unlock_irq+0x2a/0x40
[ 286.356136][ T28] ? ptrace_notify+0x245/0x340
[ 286.360937][ T28] ? get_sigframe_size+0x10/0x10
[ 286.365887][ T28] ? vtime_user_exit+0x2b2/0x3e0
[ 286.370944][ T28] ? exit_to_user_mode_loop+0x42/0x160
[ 286.376586][ T28] exit_to_user_mode_loop+0x74/0x160
[ 286.381861][ T28] exit_to_user_mode_prepare+0xad/0x110
[ 286.387444][ T28] syscall_exit_to_user_mode+0x2e/0x60
[ 286.392924][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 286.398847][ T28] RIP: 0033:0x7f93f5c306d9
[ 286.403265][ T28] RSP: 002b:00007fffd0fc8798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 286.411712][ T28] RAX: fffffffffffffe00 RBX: 0000000000000000 RCX: 00007f93f5c306d9
[ 286.419749][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
[ 286.427760][ T28] RBP: 0000000000000000 R08: 00007fffd0fc8938 R09: 00007fffd0fc8938
[ 286.435744][ T28] R10: 00007fffd0fc8938 R11: 0000000000000246 R12: 00007f93f5bef760
[ 286.444027][ T28] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 286.452062][ T28] </TASK>
[ 286.455183][ T28]
[ 286.455183][ T28] Showing all locks held in the system:
[ 286.463373][ T28] 1 lock held by rcu_tasks_kthre/12:
[ 286.468690][ T28] #0: ffffffff8cd20a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00
[ 286.479253][ T28] 1 lock held by rcu_tasks_trace/13:
[ 286.484539][ T28] #0: ffffffff8cd21270 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00
[ 286.495545][ T28] 1 lock held by khungtaskd/28:
[ 286.500422][ T28] #0: ffffffff8cd208a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[ 286.509807][ T28] 2 locks held by getty/3284:
[ 286.514501][ T28] #0: ffff88802766e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 286.524741][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50
[ 286.534993][ T28] 1 lock held by syz-executor372/3607:
[ 286.540485][ T28] #0: ffff8881474cd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730
[ 286.549952][ T28] 1 lock held by udevd/3609:
[ 286.554809][ T28] #0: ffff8881474cd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40
[ 286.564785][ T28]
[ 286.567226][ T28] =============================================
[ 286.567226][ T28]
[ 286.575631][ T28] NMI backtrace for cpu 1
[ 286.579959][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0
[ 286.589740][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 286.599777][ T28] Call Trace:
[ 286.603047][ T28] <TASK>
[ 286.606054][ T28] dump_stack_lvl+0x1e3/0x2cb
[ 286.610722][ T28] ? io_alloc_page_table+0x110/0x110
[ 286.615989][ T28] ? panic+0x76b/0x76b
[ 286.620097][ T28] ? console_unlock+0x6bd/0x6f0
[ 286.624943][ T28] ? console_trylock_spinning+0x450/0x450
[ 286.630646][ T28] ? nmi_cpu_backtrace+0x248/0x4b0
[ 286.635783][ T28] nmi_cpu_backtrace+0x47c/0x4b0
[ 286.640752][ T28] ? vprintk_emit+0x109/0x1e0
[ 286.645441][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 286.651604][ T28] ? _printk+0xcf/0x10f
[ 286.655764][ T28] ? panic+0x76b/0x76b
[ 286.659821][ T28] ? __wake_up_klogd+0xcd/0x100
[ 286.664658][ T28] ? panic+0x76b/0x76b
[ 286.668715][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 286.675084][ T28] nmi_trigger_cpumask_backtrace+0x169/0x280
[ 286.681061][ T28] watchdog+0xcd5/0xd20
[ 286.685260][ T28] kthread+0x266/0x300
[ 286.689323][ T28] ? hungtask_pm_notify+0x50/0x50
[ 286.694338][ T28] ? kthread_blkcg+0xd0/0xd0
[ 286.698942][ T28] ret_from_fork+0x1f/0x30
[ 286.703383][ T28] </TASK>
[ 286.706500][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 286.711725][ C0] NMI backtrace for cpu 0
[ 286.711735][ C0] CPU: 0 PID: 1121 Comm: kworker/u4:5 Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0
[ 286.711750][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 286.711759][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 286.711824][ C0] RIP: 0010:memset_erms+0xb/0x10
[ 286.711865][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01
[ 286.711876][ C0] RSP: 0018:ffffc9000414f8b8 EFLAGS: 00000202
[ 286.711887][ C0] RAX: 1ffff92000829f00 RBX: dffffc0000000000 RCX: 0000000000000000
[ 286.711897][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000414f9a8
[ 286.711911][ C0] RBP: ffffc9000414fa38 R08: dffffc0000000000 R09: ffffc9000414f980
[ 286.711921][ C0] R10: fffff52000829f35 R11: 1ffff92000829f30 R12: 0000000000000000
[ 286.711930][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 286.711938][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 286.711950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 286.711960][ C0] CR2: 00007ffd54c96218 CR3: 000000000ca8e000 CR4: 00000000003506f0
[ 286.711972][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 286.711980][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 286.711988][ C0] Call Trace:
[ 286.711992][ C0] <TASK>
[ 286.711997][ C0] __mutex_lock_common+0xb4/0x26c0
[ 286.712018][ C0] ? __mutex_unlock_slowpath+0x241/0x7b0
[ 286.712032][ C0] ? arch_jump_label_transform_queue+0x3f/0xd0
[ 286.712048][ C0] ? text_poke_finish+0x30/0x30
[ 286.712076][ C0] ? mutex_lock_io_nested+0x60/0x60
[ 286.712094][ C0] ? static_key_disable_cpuslocked+0x95/0x1b0
[ 286.712130][ C0] mutex_lock_nested+0x17/0x20
[ 286.712144][ C0] arch_jump_label_transform_queue+0x3f/0xd0
[ 286.712160][ C0] __jump_label_update+0x19b/0x3b0
[ 286.712180][ C0] static_key_disable_cpuslocked+0xc8/0x1b0
[ 286.712197][ C0] static_key_disable+0x16/0x20
[ 286.712212][ C0] toggle_allocation_gate+0x3d8/0x470
[ 286.712228][ C0] ? virt_to_slab+0x2c0/0x2c0
[ 286.712244][ C0] ? rcu_read_lock_sched_held+0x89/0x130
[ 286.712259][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 286.712274][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 286.712296][ C0] process_one_work+0x81c/0xd10
[ 286.712342][ C0] ? worker_detach_from_pool+0x260/0x260
[ 286.712360][ C0] ? _raw_spin_lock_irqsave+0x120/0x120
[ 286.712374][ C0] ? kthread_data+0x4d/0xc0
[ 286.712391][ C0] ? wq_worker_running+0x95/0x190
[ 286.712406][ C0] worker_thread+0xb14/0x1330
[ 286.712427][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 286.712450][ C0] kthread+0x266/0x300
[ 286.712463][ C0] ? rcu_lock_release+0x20/0x20
[ 286.712477][ C0] ? kthread_blkcg+0xd0/0xd0
[ 286.712492][ C0] ret_from_fork+0x1f/0x30
[ 286.712514][ C0] </TASK>
[ 286.712722][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 287.010113][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00302-gb96fbd602d35 #0
[ 287.019907][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 287.029963][ T28] Call Trace:
[ 287.033235][ T28] <TASK>
[ 287.036156][ T28] dump_stack_lvl+0x1e3/0x2cb
[ 287.040832][ T28] ? io_alloc_page_table+0x110/0x110
[ 287.046110][ T28] ? panic+0x76b/0x76b
[ 287.050176][ T28] ? vscnprintf+0x59/0x80
[ 287.054498][ T28] panic+0x316/0x76b
[ 287.058384][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280
[ 287.064533][ T28] ? fb_is_primary_device+0xcc/0xcc
[ 287.069724][ T28] ? check_preemption_disabled+0x20/0x120
[ 287.075440][ T28] ? irq_work_queue+0xbb/0x120
[ 287.080265][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 287.086325][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 287.092389][ T28] watchdog+0xd16/0xd20
[ 287.096559][ T28] kthread+0x266/0x300
[ 287.100619][ T28] ? hungtask_pm_notify+0x50/0x50
[ 287.105633][ T28] ? kthread_blkcg+0xd0/0xd0
[ 287.110214][ T28] ret_from_fork+0x1f/0x30
[ 287.114630][ T28] </TASK>
[ 287.117922][ T28] Kernel Offset: disabled
[ 287.122249][ T28] Rebooting in 86400 seconds..