./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3664442914 <...> Warning: Permanently added '10.128.1.154' (ECDSA) to the list of known hosts. execve("./syz-executor3664442914", ["./syz-executor3664442914"], 0x7ffc0f2fbc30 /* 10 vars */) = 0 brk(NULL) = 0x55555658f000 brk(0x55555658fc40) = 0x55555658fc40 arch_prctl(ARCH_SET_FS, 0x55555658f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3664442914", 4096) = 28 brk(0x5555565b0c40) = 0x5555565b0c40 brk(0x5555565b1000) = 0x5555565b1000 mprotect(0x7f23235e0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555658f5d0) = 5020 ./strace-static-x86_64: Process 5020 attached [pid 5020] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setsid() = 1 [pid 5020] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5020] unshare(CLONE_NEWNS) = 0 [pid 5020] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5020] unshare(CLONE_NEWIPC) = 0 [pid 5020] unshare(CLONE_NEWCGROUP) = 0 [pid 5020] unshare(CLONE_NEWUTS) = 0 [pid 5020] unshare(CLONE_SYSVSEM) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "16777216", 8) = 8 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "536870912", 9) = 9 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "8192", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5020] close(3) = 0 [pid 5020] getpid() = 1 [pid 5020] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5020] kill(-2, SIGKILL) = 0 [pid 5020] kill(2, SIGKILL) = 0 [pid 5020] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5020] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5020] getdents64(3, 0x555556590620 /* 2 entries */, 32768) = 48 [pid 5020] getdents64(3, 0x555556590620 /* 0 entries */, 32768) = 0 [pid 5020] close(3) = 0 [ 70.728268][ T915] cfg80211: failed to load regulatory.db [ 285.766125][ T28] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 285.773803][ T28] Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0 [ 285.781127][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.789915][ T28] task:kworker/0:0 state:D stack:25696 pid:7 ppid:2 flags:0x00004000 [ 285.799172][ T28] Workqueue: usb_hub_wq hub_event [ 285.804271][ T28] Call Trace: [ 285.807585][ T28] [ 285.810513][ T28] __schedule+0xc9a/0x5880 [ 285.814916][ T28] ? find_held_lock+0x2d/0x110 [ 285.819709][ T28] ? io_schedule_timeout+0x150/0x150 [ 285.824993][ T28] ? lock_downgrade+0x690/0x690 [ 285.829901][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.835114][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 285.840332][ T28] schedule+0xde/0x1a0 [ 285.844406][ T28] usb_kill_urb.part.0+0x19a/0x220 [ 285.849546][ T28] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 285.855282][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [ 285.861233][ T28] usb_kill_urb+0x83/0xa0 [ 285.865571][ T28] usb_start_wait_urb+0x24a/0x4b0 [ 285.870728][ T28] ? usb_api_blocking_completion+0xa0/0xa0 [ 285.876599][ T28] ? usb_alloc_urb+0xa4/0xb0 [ 285.881173][ T28] ? rcu_is_watching+0x12/0xb0 [ 285.885922][ T28] ? __kmalloc+0xf2/0x190 [ 285.890298][ T28] usb_control_msg+0x320/0x4a0 [ 285.895046][ T28] ? usb_start_wait_urb+0x4b0/0x4b0 [ 285.900520][ T28] ? __kmem_cache_alloc_node+0x206/0x350 [ 285.906198][ T28] ? hub_port_init+0x1487/0x3900 [ 285.911164][ T28] hub_port_init+0x14f3/0x3900 [ 285.915917][ T28] hub_event+0x2b89/0x4e40 [ 285.920372][ T28] ? hub_port_debounce+0x3b0/0x3b0 [ 285.925468][ T28] ? lock_sync+0x190/0x190 [ 285.929904][ T28] ? lock_downgrade+0x690/0x690 [ 285.934758][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.939990][ T28] process_one_work+0xa34/0x16f0 [ 285.944931][ T28] ? lock_sync+0x190/0x190 [ 285.949360][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 285.954738][ T28] ? spin_bug+0x1c0/0x1c0 [ 285.959090][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 285.964142][ T28] worker_thread+0x67d/0x10c0 [ 285.968936][ T28] ? process_one_work+0x16f0/0x16f0 [ 285.974167][ T28] kthread+0x344/0x440 [ 285.978279][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 285.984000][ T28] ret_from_fork+0x1f/0x30 [ 285.988452][ T28] [ 285.991556][ T28] INFO: task syz-executor366:5023 blocked for more than 143 seconds. [ 285.999723][ T28] Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0 [ 286.006984][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.015769][ T28] task:syz-executor366 state:D stack:26472 pid:5023 ppid:5020 flags:0x00004006 [ 286.025133][ T28] Call Trace: [ 286.028445][ T28] [ 286.031378][ T28] __schedule+0xc9a/0x5880 [ 286.035777][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.041777][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.047797][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 286.053325][ T28] ? arch_stack_walk+0x97/0xf0 [ 286.058120][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.063416][ T28] ? __mutex_lock+0xa36/0x1350 [ 286.068213][ T28] schedule+0xde/0x1a0 [ 286.072288][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.077765][ T28] __mutex_lock+0xa3b/0x1350 [ 286.082380][ T28] ? usbdev_release+0x87/0x4b0 [ 286.087180][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.092750][ T28] ? __fsnotify_parent+0x49c/0xa60 [ 286.097898][ T28] ? fsnotify+0x16e0/0x16e0 [ 286.102405][ T28] ? locks_remove_file+0x301/0x5b0 [ 286.107552][ T28] ? free_async+0x520/0x520 [ 286.112056][ T28] usbdev_release+0x87/0x4b0 [ 286.116674][ T28] ? free_async+0x520/0x520 [ 286.121177][ T28] __fput+0x40c/0xad0 [ 286.125140][ T28] task_work_run+0x16f/0x270 [ 286.129754][ T28] ? task_work_cancel+0x30/0x30 [ 286.134620][ T28] ptrace_notify+0x118/0x140 [ 286.139227][ T28] syscall_exit_to_user_mode_prepare+0x129/0x220 [ 286.145577][ T28] syscall_exit_to_user_mode+0xd/0x50 [ 286.150992][ T28] do_syscall_64+0x46/0xb0 [ 286.155434][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.161390][ T28] RIP: 0033:0x7f2323531653 [ 286.165804][ T28] RSP: 002b:00007ffe71e215b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 286.174249][ T28] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f2323531653 [ 286.182233][ T28] RDX: 0000000000000007 RSI: 00007ffe71e210e0 RDI: 0000000000000003 [ 286.190217][ T28] RBP: 00007ffe71e21610 R08: 0000000000000000 R09: 00007ffe71e21030 [ 286.198199][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f4240 [ 286.206181][ T28] R13: 0000000000000000 R14: 00007ffe71e21600 R15: 00007ffe71e215f0 [ 286.214167][ T28] [ 286.217294][ T28] [ 286.217294][ T28] Showing all locks held in the system: [ 286.225007][ T28] 5 locks held by kworker/0:0/7: [ 286.229980][ T28] #0: ffff888015e8e138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x8fd/0x16f0 [ 286.240763][ T28] #1: ffffc900000c7db0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x930/0x16f0 [ 286.252191][ T28] #2: ffff888023038190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c0/0x4e40 [ 286.261134][ T28] #3: ffff88802303c508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x278e/0x4e40 [ 286.271079][ T28] #4: ffff8880219c2b68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x27c3/0x4e40 [ 286.280822][ T28] 2 locks held by kworker/u4:0/10: [ 286.285921][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x8fd/0x16f0 [ 286.297090][ T28] #1: ffff8880b9828848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x216/0x950 [ 286.308553][ T28] 1 lock held by rcu_tasks_kthre/13: [ 286.313931][ T28] #0: ffffffff8c9a3af0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 286.324421][ T28] 1 lock held by rcu_tasks_trace/14: [ 286.329742][ T28] #0: ffffffff8c9a37f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 286.340748][ T28] 1 lock held by khungtaskd/28: [ 286.345589][ T28] #0: ffffffff8c9a4700 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 286.355484][ T28] 2 locks held by getty/4771: [ 286.360205][ T28] #0: ffff88814ac05098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 286.369993][ T28] #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xf08/0x13f0 [ 286.380162][ T28] 1 lock held by syz-executor366/5023: [ 286.385611][ T28] #0: ffff888023038190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x4b0 [ 286.394821][ T28] [ 286.397175][ T28] ============================================= [ 286.397175][ T28] [ 286.405560][ T28] NMI backtrace for cpu 1 [ 286.409864][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0 [ 286.419301][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.429337][ T28] Call Trace: [ 286.432595][ T28] [ 286.435524][ T28] dump_stack_lvl+0xd9/0x150 [ 286.440102][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 286.445032][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.450210][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 286.456182][ T28] watchdog+0xe16/0x1090 [ 286.460421][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.466391][ T28] kthread+0x344/0x440 [ 286.470445][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.476066][ T28] ret_from_fork+0x1f/0x30 [ 286.480486][ T28] [ 286.483583][ T28] Sending NMI from CPU 1 to CPUs 0: [ 286.488843][ C0] NMI backtrace for cpu 0 [ 286.488849][ C0] CPU: 0 PID: 10 Comm: kworker/u4:0 Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0 [ 286.488861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.488868][ C0] Workqueue: events_unbound toggle_allocation_gate [ 286.488882][ C0] RIP: 0010:smp_call_function_many_cond+0x699/0x1720 [ 286.488899][ C0] Code: 0b 00 85 ed 74 48 48 8b 44 24 08 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 ee 53 0b 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 d1 0d 00 00 8b 43 08 31 ff 83 e0 01 41 [ 286.488909][ C0] RSP: 0018:ffffc900000f7948 EFLAGS: 00000293 [ 286.488917][ C0] RAX: 0000000000000000 RBX: ffff8880b9943020 RCX: 0000000000000000 [ 286.488924][ C0] RDX: ffff888016a69dc0 RSI: ffffffff81798dd2 RDI: 0000000000000005 [ 286.488930][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 286.488936][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed1017328605 [ 286.488942][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000001 [ 286.488951][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 286.488961][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.488969][ C0] CR2: 00005594ee7f9680 CR3: 000000000c775000 CR4: 0000000000350ef0 [ 286.488975][ C0] Call Trace: [ 286.488978][ C0] [ 286.488982][ C0] ? nmi_cpu_backtrace+0x1d0/0x350 [ 286.488999][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.489015][ C0] ? nmi_handle+0x13d/0x400 [ 286.489028][ C0] ? irqentry_nmi_enter+0x80/0x90 [ 286.489041][ C0] ? smp_call_function_many_cond+0x699/0x1720 [ 286.489056][ C0] ? default_do_nmi+0x6b/0x170 [ 286.489067][ C0] ? exc_nmi+0x171/0x1e0 [ 286.489079][ C0] ? end_repeat_nmi+0x16/0x31 [ 286.489092][ C0] ? smp_call_function_many_cond+0x692/0x1720 [ 286.489106][ C0] ? smp_call_function_many_cond+0x699/0x1720 [ 286.489121][ C0] ? smp_call_function_many_cond+0x699/0x1720 [ 286.489135][ C0] ? smp_call_function_many_cond+0x699/0x1720 [ 286.489150][ C0] [ 286.489152][ C0] [ 286.489156][ C0] ? __text_poke+0x890/0x890 [ 286.489168][ C0] ? trace_csd_function_entry+0x1a0/0x1a0 [ 286.489181][ C0] ? perf_event_bpf_event+0x4d0/0x4d0 [ 286.489199][ C0] ? apply_relocation+0x630/0x630 [ 286.489209][ C0] ? __text_poke+0x890/0x890 [ 286.489218][ C0] on_each_cpu_cond_mask+0x5a/0xa0 [ 286.489232][ C0] ? __kmem_cache_alloc_node+0xd2/0x350 [ 286.489247][ C0] text_poke_bp_batch+0x43b/0x780 [ 286.489259][ C0] ? do_sync_core+0x30/0x30 [ 286.489269][ C0] ? arch_jump_label_transform_queue+0xa4/0x100 [ 286.489285][ C0] ? __jump_label_update+0x296/0x410 [ 286.489300][ C0] text_poke_finish+0x1a/0x30 [ 286.489310][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 286.489325][ C0] jump_label_update+0x32f/0x410 [ 286.489339][ C0] static_key_disable_cpuslocked+0x156/0x1b0 [ 286.489353][ C0] static_key_disable+0x1a/0x20 [ 286.489366][ C0] toggle_allocation_gate+0x143/0x230 [ 286.489377][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 286.489389][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.489406][ C0] process_one_work+0xa34/0x16f0 [ 286.489420][ C0] ? lock_sync+0x190/0x190 [ 286.489434][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.489448][ C0] ? spin_bug+0x1c0/0x1c0 [ 286.489461][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 286.489477][ C0] worker_thread+0x67d/0x10c0 [ 286.489492][ C0] ? process_one_work+0x16f0/0x16f0 [ 286.489505][ C0] kthread+0x344/0x440 [ 286.489515][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 286.489527][ C0] ret_from_fork+0x1f/0x30 [ 286.489544][ C0] [ 286.489863][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.847536][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0 [ 286.856977][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 286.867015][ T28] Call Trace: [ 286.870292][ T28] [ 286.873207][ T28] dump_stack_lvl+0xd9/0x150 [ 286.877798][ T28] panic+0x686/0x730 [ 286.881681][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 286.886783][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.891970][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 286.897337][ T28] ? watchdog+0xbe8/0x1090 [ 286.901750][ T28] watchdog+0xbf9/0x1090 [ 286.906012][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.912004][ T28] kthread+0x344/0x440 [ 286.916066][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.921689][ T28] ret_from_fork+0x1f/0x30 [ 286.926103][ T28] [ 286.929909][ T28] Kernel Offset: disabled [ 286.934215][ T28] Rebooting in 86400 seconds..