./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3744615242
<...>
Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts.
execve("./syz-executor3744615242", ["./syz-executor3744615242"], 0x7ffd96643b10 /* 10 vars */) = 0
brk(NULL) = 0x5555561de000
brk(0x5555561ded40) = 0x5555561ded40
arch_prctl(ARCH_SET_FS, 0x5555561de3c0) = 0
set_tid_address(0x5555561de690) = 5058
set_robust_list(0x5555561de6a0, 24) = 0
rseq(0x5555561dece0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3744615242", 4096) = 28
getrandom("\x5a\xc8\x17\xd7\x29\x07\x57\xc7", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555561ded40
brk(0x5555561ffd40) = 0x5555561ffd40
brk(0x555556200000) = 0x555556200000
mprotect(0x7f97ebb59000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5059 attached
<unfinished ...>
[pid 5059] set_robust_list(0x5555561de6a0, 24) = 0
[pid 5059] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL <unfinished ...>
[pid 5058] <... clone resumed>, child_tidptr=0x5555561de690) = 5059
[pid 5059] <... mount resumed>) = -1 EBUSY (Device or resource busy)
[pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[ 73.175160][ T28] audit: type=1400 audit(1709779360.219:86): avc: denied { execmem } for pid=5058 comm="syz-executor374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid 5059] setsid() = 1
[pid 5059] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid 5059] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid 5059] unshare(CLONE_NEWNS) = 0
[ 73.223544][ T28] audit: type=1400 audit(1709779360.269:87): avc: denied { mounton } for pid=5059 comm="syz-executor374" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 73.247629][ T28] audit: type=1400 audit(1709779360.269:88): avc: denied { mount } for pid=5059 comm="syz-executor374" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[pid 5059] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid 5059] unshare(CLONE_NEWIPC) = 0
[pid 5059] unshare(CLONE_NEWCGROUP) = 0
[pid 5059] unshare(CLONE_NEWUTS) = 0
[pid 5059] unshare(CLONE_SYSVSEM) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "16777216", 8) = 8
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "536870912", 9) = 9
[ 73.292736][ T28] audit: type=1400 audit(1709779360.339:89): avc: denied { mounton } for pid=5059 comm="syz-executor374" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "8192", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024", 4) = 4
[pid 5059] close(3) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "1024 1048576 500 1024", 21) = 21
[pid 5059] close(3) = 0
[pid 5059] getpid() = 1
[pid 5059] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 5059] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 5059] unshare(CLONE_NEWNET) = 0
[pid 5059] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid 5059] write(3, "0 65535", 7) = 7
[pid 5059] close(3) = 0
[pid 5059] mkdir("/dev/binderfs", 0777) = 0
[pid 5059] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid 5059] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached
, child_tidptr=0x5555561de690) = 2
[pid 5062] set_robust_list(0x5555561de6a0, 24) = 0
[pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5062] setpgid(0, 0) = 0
[pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5062] write(3, "1000", 4) = 4
[pid 5062] close(3) = 0
[ 73.599219][ T28] audit: type=1400 audit(1709779360.649:90): avc: denied { mounton } for pid=5059 comm="syz-executor374" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 73.622399][ T28] audit: type=1400 audit(1709779360.649:91): avc: denied { mount } for pid=5059 comm="syz-executor374" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 5062] rt_sigaction(SIGRT_1, {sa_handler=0x7f97ebafaa50, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f97ebaec0d0}, NULL, 8) = 0
[pid 5062] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f97eba75000
[pid 5062] mprotect(0x7f97eba76000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f97eba95990, parent_tid=0x7f97eba95990, exit_signal=0, stack=0x7f97eba75000, stack_size=0x20300, tls=0x7f97eba956c0}./strace-static-x86_64: Process 5063 attached
<unfinished ...>
[pid 5063] rseq(0x7f97eba95fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid 5062] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3
[pid 5063] <... rseq resumed>) = 0
[pid 5062] rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
[pid 5063] set_robust_list(0x7f97eba959a0, 24 <unfinished ...>
[pid 5062] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid 5063] <... set_robust_list resumed>) = 0
[pid 5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5063] rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5063] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid 5063] openat(AT_FDCWD, "./binderfs/binder0", O_RDONLY <unfinished ...>
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5063] <... openat resumed>) = 3
[pid 5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 5063] futex(0x7f97ebb5f408, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5063] openat(AT_FDCWD, "./binderfs/binder0", O_RDONLY <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5063] <... openat resumed>) = 4
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 5062] <... futex resumed>) = 0
[pid 5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5063] dup3(4, 3, 0 <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5063] <... dup3 resumed>) = 3
[pid 5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5063] <... futex resumed>) = 1
[pid 5063] socketpair(AF_UNIX, SOCK_DGRAM, 0, [5, 6]) = 0
[pid 5063] futex(0x7f97ebb5f40c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 5062] <... futex resumed>) = 0
[pid 5063] mount(NULL, ".", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005," <unfinished ...>
[pid 5062] futex(0x7f97ebb5f408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[ 73.733696][ T28] audit: type=1400 audit(1709779360.779:92): avc: denied { read } for pid=5062 comm="syz-executor374" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 73.757272][ T28] audit: type=1400 audit(1709779360.779:93): avc: denied { open } for pid=5062 comm="syz-executor374" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[pid 5062] futex(0x7f97ebb5f40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid 5062] futex(0x7f97ebb5f41c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid 5062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f97eba54000
[pid 5062] mprotect(0x7f97eba55000, 131072, PROT_READ|PROT_WRITE) = 0
[pid 5062] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid 5062] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f97eba74990, parent_tid=0x7f97eba74990, exit_signal=0, stack=0x7f97eba54000, stack_size=0x20300, tls=0x7f97eba746c0} => {parent_tid=[4]}, 88) = 4
./strace-static-x86_64: Process 5064 attached
[ 73.784374][ T28] audit: type=1400 audit(1709779360.829:94): avc: denied { mounton } for pid=5062 comm="syz-executor374" path="/root" dev="sda1" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[pid 5062] rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
[pid 5064] rseq(0x7f97eba74fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid 5062] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid 5064] <... rseq resumed>) = 0
[pid 5062] futex(0x7f97ebb5f418, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5064] set_robust_list(0x7f97eba749a0, 24 <unfinished ...>
[pid 5062] <... futex resumed>) = 0
[pid 5064] <... set_robust_list resumed>) = 0
[pid 5062] futex(0x7f97ebb5f41c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 5064] rt_sigprocmask(SIG_BLOCK, ~[INT], NULL, 8) = 0
[pid 5064] futex(0x7f97ebb5f41c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid 5062] <... futex resumed>) = 0
[pid 5064] futex(0x7f97ebb5f418, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 5062] futex(0x7f97ebb5f418, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid 5064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5062] <... futex resumed>) = 0
[pid 5064] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0x40} ---
[pid 5062] futex(0x7f97ebb5f41c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid 5059] kill(-2, SIGKILL) = 0
[pid 5059] kill(2, SIGKILL) = 0
[pid 5059] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid 5059] getdents64(3, 0x5555561df730 /* 2 entries */, 32768) = 48
[pid 5059] getdents64(3, 0x5555561df730 /* 0 entries */, 32768) = 0
[pid 5059] close(3) = 0
[ 87.299331][ T27] cfg80211: failed to load regulatory.db
[ 286.977746][ T29] INFO: task syz-executor374:5062 blocked for more than 143 seconds.
[ 286.985958][ T29] Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[ 286.993619][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 287.002345][ T29] task:syz-executor374 state:D stack:27856 pid:5062 tgid:5062 ppid:5059 flags:0x00004006
[ 287.012622][ T29] Call Trace:
[ 287.015912][ T29] <TASK>
[ 287.018884][ T29] __schedule+0xf12/0x5c60
[ 287.023488][ T29] ? __pfx___lock_acquire+0x10/0x10
[ 287.028856][ T29] ? __pfx___lock_acquire+0x10/0x10
[ 287.034068][ T29] ? __pfx_mark_lock+0x10/0x10
[ 287.038892][ T29] ? __pfx___schedule+0x10/0x10
[ 287.043849][ T29] ? schedule+0x200/0x280
[ 287.048244][ T29] ? __pfx_lock_release+0x10/0x10
[ 287.053286][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 287.058708][ T29] schedule+0xe9/0x280
[ 287.062800][ T29] do_exit+0x3e7/0x2ad0
[ 287.066982][ T29] ? get_signal+0x939/0x2790
[ 287.071645][ T29] ? __pfx_do_exit+0x10/0x10
[ 287.076258][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 287.081676][ T29] do_group_exit+0xd4/0x2a0
[ 287.086474][ T29] get_signal+0x23b9/0x2790
[ 287.091079][ T29] ? __pfx_get_signal+0x10/0x10
[ 287.095947][ T29] ? find_held_lock+0x2d/0x110
[ 287.100918][ T29] arch_do_signal_or_restart+0x90/0x7f0
[ 287.106540][ T29] ? __pfx_lock_release+0x10/0x10
[ 287.111662][ T29] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 287.117888][ T29] ? lockdep_hardirqs_on+0x7d/0x110
[ 287.123098][ T29] syscall_exit_to_user_mode+0x14d/0x2a0
[ 287.128827][ T29] do_syscall_64+0xe5/0x270
[ 287.133676][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 287.139718][ T29] RIP: 0033:0x7f97ebad4ab9
[ 287.144142][ T29] RSP: 002b:00007ffe3685ac48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 287.152635][ T29] RAX: ffffffffffffffda RBX: 00007ffe3685acf0 RCX: 00007f97ebad4ab9
[ 287.160704][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97ebb5f41c
[ 287.168759][ T29] RBP: 0000000000000006 R08: 0000000000000001 R09: 00007ffe3685ac80
[ 287.176743][ T29] R10: 00007ffe3685ac80 R11: 0000000000000246 R12: 0000000000012075
[ 287.184784][ T29] R13: 00000000000120a7 R14: 00007f97ebb5f41c R15: 00007f97ebb5f400
[ 287.192832][ T29] </TASK>
[ 287.195841][ T29] INFO: task syz-executor374:5064 blocked for more than 143 seconds.
[ 287.203931][ T29] Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[ 287.211608][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 287.220325][ T29] task:syz-executor374 state:D stack:29088 pid:5064 tgid:5062 ppid:5059 flags:0x00004006
[ 287.230544][ T29] Call Trace:
[ 287.233810][ T29] <TASK>
[ 287.236727][ T29] __schedule+0xf12/0x5c60
[ 287.241191][ T29] ? __pfx___lock_acquire+0x10/0x10
[ 287.246411][ T29] ? __pfx_lockdep_lock+0x10/0x10
[ 287.251501][ T29] ? __pfx___schedule+0x10/0x10
[ 287.256371][ T29] ? schedule+0x200/0x280
[ 287.260767][ T29] ? __pfx_lock_release+0x10/0x10
[ 287.265819][ T29] schedule+0xe9/0x280
[ 287.269970][ T29] schedule_timeout+0x25b/0x2a0
[ 287.274919][ T29] ? __pfx_schedule_timeout+0x10/0x10
[ 287.280456][ T29] ? _raw_spin_unlock_irq+0x29/0x50
[ 287.285683][ T29] __wait_for_common+0x3e4/0x600
[ 287.290681][ T29] ? __pfx_schedule_timeout+0x10/0x10
[ 287.296069][ T29] ? __pfx___wait_for_common+0x10/0x10
[ 287.301564][ T29] ? __pfx_try_to_wake_up+0x10/0x10
[ 287.306870][ T29] wait_for_completion_state+0x1c/0x40
[ 287.312414][ T29] do_coredump+0x90c/0x3f80
[ 287.317054][ T29] ? __pfx_lock_release+0x10/0x10
[ 287.322124][ T29] ? find_held_lock+0x2d/0x110
[ 287.326901][ T29] ? __pfx_do_coredump+0x10/0x10
[ 287.331904][ T29] ? __schedule+0xf1a/0x5c60
[ 287.336514][ T29] ? __pfx___lock_acquire+0x10/0x10
[ 287.341827][ T29] ? __pfx___lock_acquire+0x10/0x10
[ 287.347047][ T29] ? mark_held_locks+0x9f/0xe0
[ 287.351879][ T29] ? find_held_lock+0x2d/0x110
[ 287.356659][ T29] get_signal+0x2433/0x2790
[ 287.361210][ T29] ? __pfx_get_signal+0x10/0x10
[ 287.366073][ T29] arch_do_signal_or_restart+0x90/0x7f0
[ 287.371685][ T29] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 287.377913][ T29] ? trace_hardirqs_off+0x6e/0x120
[ 287.383103][ T29] ? do_user_addr_fault+0x4e0/0x1030
[ 287.388487][ T29] irqentry_exit_to_user_mode+0x13c/0x280
[ 287.394234][ T29] asm_exc_page_fault+0x26/0x30
[ 287.399152][ T29] RIP: 0033:0x7f97ebaa02a0
[ 287.403575][ T29] RSP: 002b:00007f97eba74220 EFLAGS: 00010217
[ 287.409701][ T29] RAX: 00007f97ebaa02a0 RBX: 00007f97ebb5f418 RCX: ffffffffffffffb0
[ 287.417719][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97ebb5f418
[ 287.425691][ T29] RBP: 00007f97ebb5f410 R08: 0000000000000000 R09: 0000000000000000
[ 287.433710][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97ebb5f41c
[ 287.441708][ T29] R13: 00007f97ebb2c194 R14: 00007f97ebb2c01d R15: 64663d736e617274
[ 287.449731][ T29] </TASK>
[ 287.452757][ T29]
[ 287.452757][ T29] Showing all locks held in the system:
[ 287.460568][ T29] 1 lock held by khungtaskd/29:
[ 287.465420][ T29] #0: ffffffff8d7ad220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[ 287.475449][ T29] 2 locks held by getty/4810:
[ 287.480159][ T29] #0: ffff88802a5490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 287.490069][ T29] #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfca/0x1490
[ 287.500239][ T29]
[ 287.502550][ T29] =============================================
[ 287.502550][ T29]
[ 287.511006][ T29] NMI backtrace for cpu 1
[ 287.515335][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[ 287.525132][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 287.535187][ T29] Call Trace:
[ 287.538467][ T29] <TASK>
[ 287.541393][ T29] dump_stack_lvl+0xd9/0x1b0
[ 287.546097][ T29] nmi_cpu_backtrace+0x27b/0x390
[ 287.551085][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 287.557070][ T29] nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 287.563054][ T29] watchdog+0xf87/0x1210
[ 287.567375][ T29] ? __pfx_watchdog+0x10/0x10
[ 287.572142][ T29] ? lockdep_hardirqs_on+0x7d/0x110
[ 287.577344][ T29] ? __kthread_parkme+0x14b/0x220
[ 287.582366][ T29] ? __pfx_watchdog+0x10/0x10
[ 287.587047][ T29] kthread+0x2c6/0x3b0
[ 287.591117][ T29] ? _raw_spin_unlock_irq+0x23/0x50
[ 287.596323][ T29] ? __pfx_kthread+0x10/0x10
[ 287.600914][ T29] ret_from_fork+0x45/0x80
[ 287.605355][ T29] ? __pfx_kthread+0x10/0x10
[ 287.609944][ T29] ret_from_fork_asm+0x1b/0x30
[ 287.614731][ T29] </TASK>
[ 287.617829][ T29] Sending NMI from CPU 1 to CPUs 0:
[ 287.623044][ C0] NMI backtrace for cpu 0
[ 287.623054][ C0] CPU: 0 PID: 2847 Comm: kworker/u4:9 Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[ 287.623078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 287.623091][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 287.623212][ C0] RIP: 0010:psi_task_switch+0xa8/0x900
[ 287.623241][ C0] Code: 02 84 c0 74 08 3c 03 0f 8e 22 07 00 00 48 8b 44 24 08 8b 90 a8 05 00 00 85 d2 0f 85 32 03 00 00 45 31 f6 48 8d bd a8 05 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[ 287.623262][ C0] RSP: 0018:ffffc9000a617a00 EFLAGS: 00000002
[ 287.623278][ C0] RAX: ffff8880b9428a00 RBX: 0000000000000000 RCX: 0000000000000001
[ 287.623292][ C0] RDX: 0000000000000000 RSI: ffffffff8d225a60 RDI: ffff88802b385ee8
[ 287.623306][ C0] RBP: ffff88802b385940 R08: 0000000000000004 R09: 0000000000000000
[ 287.623319][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[ 287.623333][ C0] R13: 0000000000000000 R14: ffffffff8d69b240 R15: fffffbfff1a44b4c
[ 287.623347][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 287.623369][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 287.623384][ C0] CR2: 0000555569ee6680 CR3: 000000000d57a000 CR4: 00000000003506f0
[ 287.623398][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 287.623411][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 287.623424][ C0] Call Trace:
[ 287.623431][ C0] <NMI>
[ 287.623438][ C0] ? show_regs+0x8f/0xa0
[ 287.623470][ C0] ? nmi_cpu_backtrace+0x1d8/0x390
[ 287.623500][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20
[ 287.623529][ C0] ? nmi_handle+0x1a9/0x580
[ 287.623549][ C0] ? psi_task_switch+0xa8/0x900
[ 287.623573][ C0] ? default_do_nmi+0x6a/0x160
[ 287.623603][ C0] ? exc_nmi+0x170/0x1e0
[ 287.623630][ C0] ? end_repeat_nmi+0xf/0x60
[ 287.623687][ C0] ? psi_task_switch+0xa8/0x900
[ 287.623711][ C0] ? psi_task_switch+0xa8/0x900
[ 287.623735][ C0] ? psi_task_switch+0xa8/0x900
[ 287.623759][ C0] </NMI>
[ 287.623765][ C0] <TASK>
[ 287.623773][ C0] __schedule+0x22b9/0x5c60
[ 287.623804][ C0] ? __pfx___lock_acquire+0x10/0x10
[ 287.623835][ C0] ? __print_lock_name+0x1f0/0x260
[ 287.623857][ C0] ? __pfx___schedule+0x10/0x10
[ 287.623888][ C0] ? schedule+0x200/0x280
[ 287.623917][ C0] ? __pfx_lock_release+0x10/0x10
[ 287.623944][ C0] ? mark_held_locks+0x9f/0xe0
[ 287.623972][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 287.624004][ C0] ? prepare_to_wait_event+0x96/0x6a0
[ 287.624056][ C0] ? lockdep_hardirqs_on+0x7d/0x110
[ 287.624084][ C0] schedule+0xe9/0x280
[ 287.624114][ C0] toggle_allocation_gate+0x1d7/0x250
[ 287.624138][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10
[ 287.624163][ C0] ? __pfx_autoremove_wake_function+0x10/0x10
[ 287.624193][ C0] process_one_work+0x889/0x15e0
[ 287.624230][ C0] ? __pfx_lock_acquire+0x10/0x10
[ 287.624257][ C0] ? __pfx_process_one_work+0x10/0x10
[ 287.624293][ C0] ? assign_work+0x1a0/0x250
[ 287.624324][ C0] worker_thread+0x8b9/0x12a0
[ 287.624359][ C0] ? __kthread_parkme+0x14b/0x220
[ 287.624382][ C0] ? __pfx_worker_thread+0x10/0x10
[ 287.624415][ C0] kthread+0x2c6/0x3b0
[ 287.624441][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 287.624472][ C0] ? __pfx_kthread+0x10/0x10
[ 287.624499][ C0] ret_from_fork+0x45/0x80
[ 287.624531][ C0] ? __pfx_kthread+0x10/0x10
[ 287.624558][ C0] ret_from_fork_asm+0x1b/0x30
[ 287.624606][ C0] </TASK>
[ 287.624613][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.568 msecs
[ 287.625042][ T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 287.625052][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc7-syzkaller-00020-g5847c9777c30 #0
[ 287.625074][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 287.625084][ T29] Call Trace:
[ 287.625090][ T29] <TASK>
[ 287.625095][ T29] dump_stack_lvl+0xd9/0x1b0
[ 287.625127][ T29] panic+0x6ee/0x7a0
[ 287.625162][ T29] ? __pfx_panic+0x10/0x10
[ 287.625190][ T29] ? __pfx__printk+0x10/0x10
[ 287.625256][ T29] ? __irq_work_queue_local+0x132/0x400
[ 287.625315][ T29] ? irq_work_queue+0x2a/0x80
[ 287.625337][ T29] ? watchdog+0xd3e/0x1210
[ 287.625365][ T29] ? watchdog+0xd31/0x1210
[ 287.625392][ T29] watchdog+0xd4f/0x1210
[ 287.625421][ T29] ? __pfx_watchdog+0x10/0x10
[ 287.625448][ T29] ? lockdep_hardirqs_on+0x7d/0x110
[ 287.625470][ T29] ? __kthread_parkme+0x14b/0x220
[ 287.625493][ T29] ? __pfx_watchdog+0x10/0x10
[ 287.625521][ T29] kthread+0x2c6/0x3b0
[ 287.625545][ T29] ? _raw_spin_unlock_irq+0x23/0x50
[ 287.625574][ T29] ? __pfx_kthread+0x10/0x10
[ 287.625600][ T29] ret_from_fork+0x45/0x80
[ 287.625630][ T29] ? __pfx_kthread+0x10/0x10
[ 287.625655][ T29] ret_from_fork_asm+0x1b/0x30
[ 287.625687][ T29] </TASK>
[ 287.629702][ T29] Kernel Offset: disabled
[ 288.106028][ T29] Rebooting in 86400 seconds..