DUID 00:04:48:2f:83:80:5e:82:2f:af:2e:03:8c:bf:d4:14:8e:03 forked to background, child pid 3176 [ 25.948848][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.958033][ T3177] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 76.204918][ T22] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.159' (ECDSA) to the list of known hosts. executing program executing program [ 508.843656][ T51] block nbd0: Possible stuck request ffff88801c8f0000: control (read@7029819719548382208,4096B). Runtime 30 seconds [ 538.839863][ T2966] udevd[2966]: worker [3628] /devices/virtual/block/nbd0/nbd0p4 is taking a long time [ 659.000858][ T2966] udevd[2966]: worker [3628] /devices/virtual/block/nbd0/nbd0p4 timeout; kill it [ 659.010544][ T2966] udevd[2966]: seq 7415 '/devices/virtual/block/nbd0/nbd0p4' killed [ 716.203411][ T27] INFO: task syz-executor558:3629 blocked for more than 143 seconds. [ 716.211575][ T27] Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 716.219252][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.228078][ T27] task:syz-executor558 state:D stack:26896 pid: 3629 ppid: 3626 flags:0x00004004 [ 716.237471][ T27] Call Trace: [ 716.240744][ T27] [ 716.243824][ T27] __schedule+0x937/0x1090 [ 716.248321][ T27] ? __sched_text_start+0x8/0x8 [ 716.253203][ T27] ? prepare_to_wait_event+0x467/0x560 [ 716.258749][ T27] schedule+0xeb/0x1b0 [ 716.262797][ T27] blk_mq_freeze_queue_wait+0x105/0x190 [ 716.268399][ T27] ? blk_mq_run_hw_queues+0x460/0x460 [ 716.273783][ T27] ? wake_bit_function+0x230/0x230 [ 716.278879][ T27] ? percpu_ref_kill_and_confirm+0x9c/0x130 [ 716.284914][ T27] ? unix_listen+0x550/0x550 [ 716.289540][ T27] nbd_add_socket+0x17b/0x8e0 [ 716.294278][ T27] ? nbd_alloc_config+0x170/0x170 [ 716.299302][ T27] ? bpf_lsm_capable+0x5/0x10 [ 716.304039][ T27] ? security_capable+0xb1/0xd0 [ 716.308934][ T27] nbd_ioctl+0x263/0xb80 [ 716.313206][ T27] ? nbd_release+0x120/0x120 [ 716.317835][ T27] ? memset+0x1f/0x40 [ 716.321836][ T27] ? smack_file_ioctl+0x298/0x3a0 [ 716.326904][ T27] ? smack_file_alloc_security+0xd0/0xd0 [ 716.332534][ T27] ? nbd_release+0x120/0x120 [ 716.337433][ T27] blkdev_ioctl+0x3a6/0x780 [ 716.342024][ T27] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 716.347595][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 716.352532][ T27] ? security_file_ioctl+0x9d/0xb0 [ 716.357672][ T27] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 716.363146][ T27] __se_sys_ioctl+0xfb/0x170 [ 716.367747][ T27] do_syscall_64+0x2b/0x50 [ 716.372152][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 716.378092][ T27] RIP: 0033:0x7fe94e1c73e9 [ 716.382503][ T27] RSP: 002b:00007fff230e7bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.390938][ T27] RAX: ffffffffffffffda RBX: 0000000000074e0a RCX: 00007fe94e1c73e9 [ 716.398928][ T27] RDX: 0000000000000005 RSI: 000000000000ab00 RDI: 0000000000000004 [ 716.406916][ T27] RBP: 0000000000000000 R08: 00007fff230e7d98 R09: 00007fff230e7d98 [ 716.414945][ T27] R10: 00007fff230e7d98 R11: 0000000000000246 R12: 00007fff230e7c0c [ 716.422897][ T27] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 716.430999][ T27] [ 716.434056][ T27] [ 716.434056][ T27] Showing all locks held in the system: [ 716.441762][ T27] 1 lock held by khungtaskd/27: [ 716.447039][ T27] #0: ffffffff8cd1cd60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 716.456465][ T27] 1 lock held by klogd/2955: [ 716.461043][ T27] #0: ffff8880b9b39bd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x110 [ 716.471004][ T27] 2 locks held by getty/3280: [ 716.475698][ T27] #0: ffff88814bfb8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 716.485506][ T27] #1: ffffc90002e732e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6c2/0x1c60 [ 716.495635][ T27] 1 lock held by udevd/3628: [ 716.500199][ T27] #0: ffff88801c8a0918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf8/0x7a0 [ 716.509547][ T27] 1 lock held by syz-executor558/3629: [ 716.515013][ T27] #0: ffff88801c775998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x148/0xb80 [ 716.524406][ T27] [ 716.526722][ T27] ============================================= [ 716.526722][ T27] [ 716.535145][ T27] NMI backtrace for cpu 0 [ 716.539459][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 716.549320][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.559349][ T27] Call Trace: [ 716.562606][ T27] [ 716.565520][ T27] dump_stack_lvl+0x1dc/0x2d8 [ 716.570218][ T27] ? show_regs_print_info+0x12/0x12 [ 716.575393][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.581105][ T27] nmi_cpu_backtrace+0x45f/0x490 [ 716.586025][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 716.592158][ T27] ? wake_up_klogd+0xb2/0xf0 [ 716.596724][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.602423][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 716.608497][ T27] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 716.614452][ T27] watchdog+0xc82/0xcd0 [ 716.618607][ T27] kthread+0x2a3/0x2d0 [ 716.622666][ T27] ? hungtask_pm_notify+0x50/0x50 [ 716.627666][ T27] ? kthread_blkcg+0xd0/0xd0 [ 716.632231][ T27] ret_from_fork+0x1f/0x30 [ 716.636642][ T27] [ 716.639794][ T27] Sending NMI from CPU 0 to CPUs 1: [ 716.645037][ C1] NMI backtrace for cpu 1 [ 716.645046][ C1] CPU: 1 PID: 975 Comm: kworker/u4:4 Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 716.645061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.645070][ C1] Workqueue: events_unbound toggle_allocation_gate [ 716.645090][ C1] RIP: 0010:validate_chain+0xfe/0x8250 [ 716.645106][ C1] Code: 48 8d 5e 20 48 89 d8 48 c1 e8 03 48 89 44 24 58 42 8a 04 20 84 c0 0f 85 de 09 00 00 48 89 5c 24 10 8b 1b 89 d8 25 00 80 04 00 <3d> 00 00 04 00 0f 85 e9 04 00 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 [ 716.645117][ C1] RSP: 0018:ffffc90004967180 EFLAGS: 00000006 [ 716.645128][ C1] RAX: 0000000000040000 RBX: 000000000004008f RCX: 74d2cd9d99b1225f [ 716.645138][ C1] RDX: 0000000000000000 RSI: ffff88801deae228 RDI: ffff88801dead700 [ 716.645147][ C1] RBP: ffffc90004967490 R08: dffffc0000000000 R09: fffffbfff1f86d83 [ 716.645158][ C1] R10: fffffbfff1f86d83 R11: 0000000000000000 R12: dffffc0000000000 [ 716.645167][ C1] R13: 1ffff9200092ce50 R14: 74d2cd9d99b1225f R15: 74d2cd9d99b1225f [ 716.645177][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 716.645189][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.645199][ C1] CR2: 000055c1909809e8 CR3: 000000000ca8e000 CR4: 00000000003506e0 [ 716.645212][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 716.645221][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 716.645229][ C1] Call Trace: [ 716.645234][ C1] [ 716.645242][ C1] ? validate_chain+0x128/0x8250 [ 716.645257][ C1] ? validate_chain+0x128/0x8250 [ 716.645272][ C1] ? reacquire_held_locks+0x620/0x620 [ 716.645284][ C1] ? mark_lock+0x191/0x1e00 [ 716.645299][ C1] ? validate_chain+0x128/0x8250 [ 716.645311][ C1] ? __print_lock_name+0x1d0/0x1d0 [ 716.645325][ C1] ? validate_chain+0x128/0x8250 [ 716.645341][ C1] ? __print_lock_name+0x1d0/0x1d0 [ 716.645355][ C1] ? reacquire_held_locks+0x620/0x620 [ 716.645367][ C1] ? mark_lock+0x191/0x1e00 [ 716.645380][ C1] ? mark_lock+0x191/0x1e00 [ 716.645393][ C1] __lock_acquire+0x1382/0x2b00 [ 716.645418][ C1] ? trace_lock_acquire+0x190/0x190 [ 716.645434][ C1] lock_acquire+0x19f/0x4d0 [ 716.645446][ C1] ? __get_locked_pte+0x2ad/0x390 [ 716.645493][ C1] ? read_lock_is_recursive+0x10/0x10 [ 716.645509][ C1] ? __text_poke+0x874/0x9f0 [ 716.645537][ C1] ? __lock_acquire+0x2b00/0x2b00 [ 716.645549][ C1] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 716.645564][ C1] ? kmem_cache_alloc_lru+0xbe/0x300 [ 716.645593][ C1] _raw_spin_lock+0x2a/0x40 [ 716.645608][ C1] ? __get_locked_pte+0x2ad/0x390 [ 716.645621][ C1] __get_locked_pte+0x2ad/0x390 [ 716.645636][ C1] __text_poke+0x280/0x9f0 [ 716.645650][ C1] ? kmem_cache_alloc_trace+0x128/0x330 [ 716.645667][ C1] ? text_poke+0x80/0x80 [ 716.645680][ C1] ? text_poke_sync+0x20/0x20 [ 716.645701][ C1] ? smp_call_function_many+0x30/0x30 [ 716.645731][ C1] ? perf_event_bpf_output+0x240/0x240 [ 716.645766][ C1] ? kmem_cache_alloc_trace+0x128/0x330 [ 716.645780][ C1] text_poke_bp_batch+0x680/0x920 [ 716.645799][ C1] ? text_poke_loc_init+0x570/0x570 [ 716.645816][ C1] ? arch_jump_label_transform_queue+0x7c/0xd0 [ 716.645830][ C1] ? __jump_label_update+0x32c/0x350 [ 716.645861][ C1] text_poke_finish+0x16/0x30 [ 716.645875][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 716.645889][ C1] static_key_enable_cpuslocked+0x12d/0x250 [ 716.645903][ C1] static_key_enable+0x16/0x20 [ 716.645915][ C1] toggle_allocation_gate+0xbf/0x460 [ 716.645931][ C1] ? show_object+0xa0/0xa0 [ 716.645946][ C1] ? rcu_read_lock_sched_held+0x89/0x130 [ 716.645984][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 716.645997][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 716.646014][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 716.646030][ C1] process_one_work+0x83c/0x11a0 [ 716.646063][ C1] ? worker_detach_from_pool+0x260/0x260 [ 716.646078][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 716.646093][ C1] ? kthread_data+0x4d/0xc0 [ 716.646106][ C1] ? wq_worker_running+0x95/0x190 [ 716.646120][ C1] worker_thread+0xa6c/0x1290 [ 716.646143][ C1] kthread+0x2a3/0x2d0 [ 716.646155][ C1] ? rcu_lock_release+0x20/0x20 [ 716.646167][ C1] ? kthread_blkcg+0xd0/0xd0 [ 716.646180][ C1] ret_from_fork+0x1f/0x30 [ 716.646200][ C1] [ 716.646205][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.168 msecs [ 716.653145][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 716.653155][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.18.0-rc1-syzkaller-00016-g3e732ebf7316 #0 [ 716.653171][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.653179][ T27] Call Trace: [ 716.653184][ T27] [ 716.653191][ T27] dump_stack_lvl+0x1dc/0x2d8 [ 716.653214][ T27] ? show_regs_print_info+0x12/0x12 [ 716.653232][ T27] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 716.653256][ T27] ? vscnprintf+0x59/0x80 [ 716.653276][ T27] panic+0x313/0x890 [ 716.653319][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 716.653337][ T27] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 716.653354][ T27] ? nmi_panic+0x90/0x90 [ 716.653373][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 716.653391][ T27] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 716.653413][ T27] ? nmi_trigger_cpumask_backtrace+0x266/0x280 [ 716.653435][ T27] watchdog+0xcc2/0xcd0 [ 716.653464][ T27] kthread+0x2a3/0x2d0 [ 716.653478][ T27] ? hungtask_pm_notify+0x50/0x50 [ 716.653492][ T27] ? kthread_blkcg+0xd0/0xd0 [ 716.653509][ T27] ret_from_fork+0x1f/0x30 [ 716.653538][ T27] [ 716.661686][ T27] Kernel Offset: disabled [ 717.198167][ T27] Rebooting in 86400 seconds..