./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3744615242

<...>
Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts.
execve("./syz-executor3744615242", ["./syz-executor3744615242"], 0x7ffd96643b10 /* 10 vars */) = 0
brk(NULL)                               = 0x5555561de000
brk(0x5555561ded40)                     = 0x5555561ded40
arch_prctl(ARCH_SET_FS, 0x5555561de3c0) = 0
set_tid_address(0x5555561de690)         = 5058
set_robust_list(0x5555561de6a0, 24)     = 0
rseq(0x5555561dece0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3744615242", 4096) = 28
getrandom("\x5a\xc8\x17\xd7\x29\x07\x57\xc7", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555561ded40
brk(0x5555561ffd40)                     = 0x5555561ffd40
brk(0x555556200000)                     = 0x555556200000
mprotect(0x7f97ebb59000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5059 attached
 <unfinished ...>
[pid  5059] set_robust_list(0x5555561de6a0, 24) = 0
[pid  5059] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL <unfinished ...>
[pid  5058] <... clone resumed>, child_tidptr=0x5555561de690) = 5059
[pid  5059] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid  5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[   73.175160][   T28] audit: type=1400 audit(1709779360.219:86): avc:  denied  { execmem } for  pid=5058 comm="syz-executor374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid  5059] setsid()                    = 1
[pid  5059] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5059] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5059] unshare(CLONE_NEWNS)        = 0
[   73.223544][   T28] audit: type=1400 audit(1709779360.269:87): avc:  denied  { mounton } for  pid=5059 comm="syz-executor374" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   73.247629][   T28] audit: type=1400 audit(1709779360.269:88): avc:  denied  { mount } for  pid=5059 comm="syz-executor374" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[pid  5059] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5059] unshare(CLONE_NEWIPC)       = 0
[pid  5059] unshare(CLONE_NEWCGROUP)    = 0
[pid  5059] unshare(CLONE_NEWUTS)       = 0
[pid  5059] unshare(CLONE_SYSVSEM)      = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "16777216", 8)     = 8
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "536870912", 9)    = 9
[   73.292736][   T28] audit: type=1400 audit(1709779360.339:89): avc:  denied  { mounton } for  pid=5059 comm="syz-executor374" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "8192", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5059] close(3)                    = 0
[pid  5059] getpid()                    = 1
[pid  5059] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5059] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5059] unshare(CLONE_NEWNET)       = 0
[pid  5059] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "0 65535", 7)      = 7
[pid  5059] close(3)                    = 0
[pid  5059] mkdir("/dev/binderfs", 0777) = 0
[pid  5059] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5059] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached
, child_tidptr=0x5555561de690) = 2
[pid  5062] set_robust_list(0x5555561de6a0, 24) = 0
[pid  5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5062] setpgid(0, 0)               = 0
[pid  5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "1000", 4)         = 4
[pid  5062] close(3)                    = 0
[   73.599219][   T28] audit: type=1400 audit(1709779360.649:90): avc:  denied  { mounton } for  pid=5059 comm="syz-executor374" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   73.622399][   T28] audit: type=1400 audit(1709779360.649:91): avc:  denied  { mount } for  pid=5059 comm="syz-executor374" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5062] rt_sigaction(SIGRT_1, {sa_handler=0x7f97ebafaa50, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f97ebaec0d0}, NULL, 8) = 0
[pid  5062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f97eba75000
[pid  5062] mprotect(0x7f97eba76000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f97eba95990, parent_tid=0x7f97eba95990, exit_signal=0, stack=0x7f97eba75000, stack_size=0x20300, tls=0x7f97eba956c0}./strace-static-x86_64: Process 5063 attached
 <unfinished ...>
[pid  5063] rseq(0x7f97eba95fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5062] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3
[pid  5063] <... rseq resumed>)         = 0
[pid  5062] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5063] set_robust_list(0x7f97eba959a0, 24 <unfinished ...>
[pid  5062] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5063] <... set_robust_list resumed>) = 0
[pid  5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5063] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5063] openat(AT_FDCWD, "./binderfs/binder0", O_RDONLY <unfinished ...>
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] <... openat resumed>)       = 3
[pid  5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5063] futex(0x7f97ebb5f408, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5063] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] openat(AT_FDCWD, "./binderfs/binder0", O_RDONLY <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5063] <... openat resumed>)       = 4
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5062] <... futex resumed>)        = 0
[pid  5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5063] dup3(4, 3, 0 <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] <... dup3 resumed>)         = 3
[pid  5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5063] <... futex resumed>)        = 1
[pid  5063] socketpair(AF_UNIX, SOCK_DGRAM, 0, [5, 6]) = 0
[pid  5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5062] <... futex resumed>)        = 0
[pid  5063] mount(NULL, ".", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005," <unfinished ...>
[pid  5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   73.733696][   T28] audit: type=1400 audit(1709779360.779:92): avc:  denied  { read } for  pid=5062 comm="syz-executor374" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   73.757272][   T28] audit: type=1400 audit(1709779360.779:93): avc:  denied  { open } for  pid=5062 comm="syz-executor374" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[pid  5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5062] futex(0x7f97ebb5f41c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f97eba54000
[pid  5062] mprotect(0x7f97eba55000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f97eba74990, parent_tid=0x7f97eba74990, exit_signal=0, stack=0x7f97eba54000, stack_size=0x20300, tls=0x7f97eba746c0} => {parent_tid=[4]}, 88) = 4
./strace-static-x86_64: Process 5064 attached
[   73.784374][   T28] audit: type=1400 audit(1709779360.829:94): avc:  denied  { mounton } for  pid=5062 comm="syz-executor374" path="/root" dev="sda1" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[pid  5062] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5064] rseq(0x7f97eba74fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5062] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5064] <... rseq resumed>)         = 0
[pid  5062] futex(0x7f97ebb5f418, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5064] set_robust_list(0x7f97eba749a0, 24 <unfinished ...>
[pid  5062] <... futex resumed>)        = 0
[pid  5064] <... set_robust_list resumed>) = 0
[pid  5062] futex(0x7f97ebb5f41c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5064] rt_sigprocmask(SIG_BLOCK, ~[INT], NULL, 8) = 0
[pid  5064] futex(0x7f97ebb5f41c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5062] <... futex resumed>)        = 0
[pid  5064] futex(0x7f97ebb5f418, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5062] futex(0x7f97ebb5f418, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5064] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5062] <... futex resumed>)        = 0
[pid  5064] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x40} ---
[pid  5062] futex(0x7f97ebb5f41c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5059] kill(-2, SIGKILL)           = 0
[pid  5059] kill(2, SIGKILL)            = 0
[pid  5059] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5059] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid  5059] getdents64(3, 0x5555561df730 /* 2 entries */, 32768) = 48
[pid  5059] getdents64(3, 0x5555561df730 /* 0 entries */, 32768) = 0
[pid  5059] close(3)                    = 0
[   87.299331][   T27] cfg80211: failed to load regulatory.db
[  286.977746][   T29] INFO: task syz-executor374:5062 blocked for more than 143 seconds.
[  286.985958][   T29]       Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[  286.993619][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.002345][   T29] task:syz-executor374 state:D stack:27856 pid:5062  tgid:5062  ppid:5059   flags:0x00004006
[  287.012622][   T29] Call Trace:
[  287.015912][   T29]  <TASK>
[  287.018884][   T29]  __schedule+0xf12/0x5c60
[  287.023488][   T29]  ? __pfx___lock_acquire+0x10/0x10
[  287.028856][   T29]  ? __pfx___lock_acquire+0x10/0x10
[  287.034068][   T29]  ? __pfx_mark_lock+0x10/0x10
[  287.038892][   T29]  ? __pfx___schedule+0x10/0x10
[  287.043849][   T29]  ? schedule+0x200/0x280
[  287.048244][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.053286][   T29]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  287.058708][   T29]  schedule+0xe9/0x280
[  287.062800][   T29]  do_exit+0x3e7/0x2ad0
[  287.066982][   T29]  ? get_signal+0x939/0x2790
[  287.071645][   T29]  ? __pfx_do_exit+0x10/0x10
[  287.076258][   T29]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  287.081676][   T29]  do_group_exit+0xd4/0x2a0
[  287.086474][   T29]  get_signal+0x23b9/0x2790
[  287.091079][   T29]  ? __pfx_get_signal+0x10/0x10
[  287.095947][   T29]  ? find_held_lock+0x2d/0x110
[  287.100918][   T29]  arch_do_signal_or_restart+0x90/0x7f0
[  287.106540][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.111662][   T29]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  287.117888][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  287.123098][   T29]  syscall_exit_to_user_mode+0x14d/0x2a0
[  287.128827][   T29]  do_syscall_64+0xe5/0x270
[  287.133676][   T29]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[  287.139718][   T29] RIP: 0033:0x7f97ebad4ab9
[  287.144142][   T29] RSP: 002b:00007ffe3685ac48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  287.152635][   T29] RAX: ffffffffffffffda RBX: 00007ffe3685acf0 RCX: 00007f97ebad4ab9
[  287.160704][   T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97ebb5f41c
[  287.168759][   T29] RBP: 0000000000000006 R08: 0000000000000001 R09: 00007ffe3685ac80
[  287.176743][   T29] R10: 00007ffe3685ac80 R11: 0000000000000246 R12: 0000000000012075
[  287.184784][   T29] R13: 00000000000120a7 R14: 00007f97ebb5f41c R15: 00007f97ebb5f400
[  287.192832][   T29]  </TASK>
[  287.195841][   T29] INFO: task syz-executor374:5064 blocked for more than 143 seconds.
[  287.203931][   T29]       Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[  287.211608][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.220325][   T29] task:syz-executor374 state:D stack:29088 pid:5064  tgid:5062  ppid:5059   flags:0x00004006
[  287.230544][   T29] Call Trace:
[  287.233810][   T29]  <TASK>
[  287.236727][   T29]  __schedule+0xf12/0x5c60
[  287.241191][   T29]  ? __pfx___lock_acquire+0x10/0x10
[  287.246411][   T29]  ? __pfx_lockdep_lock+0x10/0x10
[  287.251501][   T29]  ? __pfx___schedule+0x10/0x10
[  287.256371][   T29]  ? schedule+0x200/0x280
[  287.260767][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.265819][   T29]  schedule+0xe9/0x280
[  287.269970][   T29]  schedule_timeout+0x25b/0x2a0
[  287.274919][   T29]  ? __pfx_schedule_timeout+0x10/0x10
[  287.280456][   T29]  ? _raw_spin_unlock_irq+0x29/0x50
[  287.285683][   T29]  __wait_for_common+0x3e4/0x600
[  287.290681][   T29]  ? __pfx_schedule_timeout+0x10/0x10
[  287.296069][   T29]  ? __pfx___wait_for_common+0x10/0x10
[  287.301564][   T29]  ? __pfx_try_to_wake_up+0x10/0x10
[  287.306870][   T29]  wait_for_completion_state+0x1c/0x40
[  287.312414][   T29]  do_coredump+0x90c/0x3f80
[  287.317054][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.322124][   T29]  ? find_held_lock+0x2d/0x110
[  287.326901][   T29]  ? __pfx_do_coredump+0x10/0x10
[  287.331904][   T29]  ? __schedule+0xf1a/0x5c60
[  287.336514][   T29]  ? __pfx___lock_acquire+0x10/0x10
[  287.341827][   T29]  ? __pfx___lock_acquire+0x10/0x10
[  287.347047][   T29]  ? mark_held_locks+0x9f/0xe0
[  287.351879][   T29]  ? find_held_lock+0x2d/0x110
[  287.356659][   T29]  get_signal+0x2433/0x2790
[  287.361210][   T29]  ? __pfx_get_signal+0x10/0x10
[  287.366073][   T29]  arch_do_signal_or_restart+0x90/0x7f0
[  287.371685][   T29]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  287.377913][   T29]  ? trace_hardirqs_off+0x6e/0x120
[  287.383103][   T29]  ? do_user_addr_fault+0x4e0/0x1030
[  287.388487][   T29]  irqentry_exit_to_user_mode+0x13c/0x280
[  287.394234][   T29]  asm_exc_page_fault+0x26/0x30
[  287.399152][   T29] RIP: 0033:0x7f97ebaa02a0
[  287.403575][   T29] RSP: 002b:00007f97eba74220 EFLAGS: 00010217
[  287.409701][   T29] RAX: 00007f97ebaa02a0 RBX: 00007f97ebb5f418 RCX: ffffffffffffffb0
[  287.417719][   T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97ebb5f418
[  287.425691][   T29] RBP: 00007f97ebb5f410 R08: 0000000000000000 R09: 0000000000000000
[  287.433710][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97ebb5f41c
[  287.441708][   T29] R13: 00007f97ebb2c194 R14: 00007f97ebb2c01d R15: 64663d736e617274
[  287.449731][   T29]  </TASK>
[  287.452757][   T29] 
[  287.452757][   T29] Showing all locks held in the system:
[  287.460568][   T29] 1 lock held by khungtaskd/29:
[  287.465420][   T29]  #0: ffffffff8d7ad220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[  287.475449][   T29] 2 locks held by getty/4810:
[  287.480159][   T29]  #0: ffff88802a5490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  287.490069][   T29]  #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfca/0x1490
[  287.500239][   T29] 
[  287.502550][   T29] =============================================
[  287.502550][   T29] 
[  287.511006][   T29] NMI backtrace for cpu 1
[  287.515335][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[  287.525132][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  287.535187][   T29] Call Trace:
[  287.538467][   T29]  <TASK>
[  287.541393][   T29]  dump_stack_lvl+0xd9/0x1b0
[  287.546097][   T29]  nmi_cpu_backtrace+0x27b/0x390
[  287.551085][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  287.557070][   T29]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  287.563054][   T29]  watchdog+0xf87/0x1210
[  287.567375][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.572142][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  287.577344][   T29]  ? __kthread_parkme+0x14b/0x220
[  287.582366][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.587047][   T29]  kthread+0x2c6/0x3b0
[  287.591117][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.596323][   T29]  ? __pfx_kthread+0x10/0x10
[  287.600914][   T29]  ret_from_fork+0x45/0x80
[  287.605355][   T29]  ? __pfx_kthread+0x10/0x10
[  287.609944][   T29]  ret_from_fork_asm+0x1b/0x30
[  287.614731][   T29]  </TASK>
[  287.617829][   T29] Sending NMI from CPU 1 to CPUs 0:
[  287.623044][    C0] NMI backtrace for cpu 0
[  287.623054][    C0] CPU: 0 PID: 2847 Comm: kworker/u4:9 Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[  287.623078][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  287.623091][    C0] Workqueue: events_unbound toggle_allocation_gate
[  287.623212][    C0] RIP: 0010:psi_task_switch+0xa8/0x900
[  287.623241][    C0] Code: 02 84 c0 74 08 3c 03 0f 8e 22 07 00 00 48 8b 44 24 08 8b 90 a8 05 00 00 85 d2 0f 85 32 03 00 00 45 31 f6 48 8d bd a8 05 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  287.623262][    C0] RSP: 0018:ffffc9000a617a00 EFLAGS: 00000002
[  287.623278][    C0] RAX: ffff8880b9428a00 RBX: 0000000000000000 RCX: 0000000000000001
[  287.623292][    C0] RDX: 0000000000000000 RSI: ffffffff8d225a60 RDI: ffff88802b385ee8
[  287.623306][    C0] RBP: ffff88802b385940 R08: 0000000000000004 R09: 0000000000000000
[  287.623319][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  287.623333][    C0] R13: 0000000000000000 R14: ffffffff8d69b240 R15: fffffbfff1a44b4c
[  287.623347][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  287.623369][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.623384][    C0] CR2: 0000555569ee6680 CR3: 000000000d57a000 CR4: 00000000003506f0
[  287.623398][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  287.623411][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  287.623424][    C0] Call Trace:
[  287.623431][    C0]  <NMI>
[  287.623438][    C0]  ? show_regs+0x8f/0xa0
[  287.623470][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  287.623500][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  287.623529][    C0]  ? nmi_handle+0x1a9/0x580
[  287.623549][    C0]  ? psi_task_switch+0xa8/0x900
[  287.623573][    C0]  ? default_do_nmi+0x6a/0x160
[  287.623603][    C0]  ? exc_nmi+0x170/0x1e0
[  287.623630][    C0]  ? end_repeat_nmi+0xf/0x60
[  287.623687][    C0]  ? psi_task_switch+0xa8/0x900
[  287.623711][    C0]  ? psi_task_switch+0xa8/0x900
[  287.623735][    C0]  ? psi_task_switch+0xa8/0x900
[  287.623759][    C0]  </NMI>
[  287.623765][    C0]  <TASK>
[  287.623773][    C0]  __schedule+0x22b9/0x5c60
[  287.623804][    C0]  ? __pfx___lock_acquire+0x10/0x10
[  287.623835][    C0]  ? __print_lock_name+0x1f0/0x260
[  287.623857][    C0]  ? __pfx___schedule+0x10/0x10
[  287.623888][    C0]  ? schedule+0x200/0x280
[  287.623917][    C0]  ? __pfx_lock_release+0x10/0x10
[  287.623944][    C0]  ? mark_held_locks+0x9f/0xe0
[  287.623972][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  287.624004][    C0]  ? prepare_to_wait_event+0x96/0x6a0
[  287.624056][    C0]  ? lockdep_hardirqs_on+0x7d/0x110
[  287.624084][    C0]  schedule+0xe9/0x280
[  287.624114][    C0]  toggle_allocation_gate+0x1d7/0x250
[  287.624138][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  287.624163][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  287.624193][    C0]  process_one_work+0x889/0x15e0
[  287.624230][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  287.624257][    C0]  ? __pfx_process_one_work+0x10/0x10
[  287.624293][    C0]  ? assign_work+0x1a0/0x250
[  287.624324][    C0]  worker_thread+0x8b9/0x12a0
[  287.624359][    C0]  ? __kthread_parkme+0x14b/0x220
[  287.624382][    C0]  ? __pfx_worker_thread+0x10/0x10
[  287.624415][    C0]  kthread+0x2c6/0x3b0
[  287.624441][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.624472][    C0]  ? __pfx_kthread+0x10/0x10
[  287.624499][    C0]  ret_from_fork+0x45/0x80
[  287.624531][    C0]  ? __pfx_kthread+0x10/0x10
[  287.624558][    C0]  ret_from_fork_asm+0x1b/0x30
[  287.624606][    C0]  </TASK>
[  287.624613][    C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.568 msecs
[  287.625042][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  287.625052][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[  287.625074][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[  287.625084][   T29] Call Trace:
[  287.625090][   T29]  <TASK>
[  287.625095][   T29]  dump_stack_lvl+0xd9/0x1b0
[  287.625127][   T29]  panic+0x6ee/0x7a0
[  287.625162][   T29]  ? __pfx_panic+0x10/0x10
[  287.625190][   T29]  ? __pfx__printk+0x10/0x10
[  287.625256][   T29]  ? __irq_work_queue_local+0x132/0x400
[  287.625315][   T29]  ? irq_work_queue+0x2a/0x80
[  287.625337][   T29]  ? watchdog+0xd3e/0x1210
[  287.625365][   T29]  ? watchdog+0xd31/0x1210
[  287.625392][   T29]  watchdog+0xd4f/0x1210
[  287.625421][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.625448][   T29]  ? lockdep_hardirqs_on+0x7d/0x110
[  287.625470][   T29]  ? __kthread_parkme+0x14b/0x220
[  287.625493][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.625521][   T29]  kthread+0x2c6/0x3b0
[  287.625545][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.625574][   T29]  ? __pfx_kthread+0x10/0x10
[  287.625600][   T29]  ret_from_fork+0x45/0x80
[  287.625630][   T29]  ? __pfx_kthread+0x10/0x10
[  287.625655][   T29]  ret_from_fork_asm+0x1b/0x30
[  287.625687][   T29]  </TASK>
[  287.629702][   T29] Kernel Offset: disabled
[  288.106028][   T29] Rebooting in 86400 seconds..