./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4205630493 <...> Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. execve("./syz-executor4205630493", ["./syz-executor4205630493"], 0x7fff9080b9a0 /* 10 vars */) = 0 brk(NULL) = 0x555557466000 brk(0x555557466d00) = 0x555557466d00 arch_prctl(ARCH_SET_FS, 0x555557466380) = 0 set_tid_address(0x555557466650) = 5061 set_robust_list(0x555557466660, 24) = 0 rseq(0x555557466ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4205630493", 4096) = 28 getrandom("\x72\x00\x4d\x9d\xdf\xca\x4f\x31", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557466d00 brk(0x555557487d00) = 0x555557487d00 brk(0x555557488000) = 0x555557488000 mprotect(0x7ff00cdac000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x555557466650) = 5062 [pid 5062] set_robust_list(0x555557466660, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 5062] socket(AF_AX25, SOCK_DGRAM, 0 /* AX25_P_??? */) = 4 [pid 5062] dup(4) = 5 [pid 5062] ioctl(3, NBD_SET_SOCK, 5) = 0 [pid 5062] ioctl(3, NBD_DO_IT [pid 5061] kill(-5062, SIGKILL) = 0 [pid 5061] kill(5062, SIGKILL) = 0 [ 58.439443][ T5062] block nbd0: shutting down sockets [pid 5061] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x5555574676f0 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, 0x5555574676f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [ 76.555125][ T8] cfg80211: failed to load regulatory.db [ 286.473522][ T29] INFO: task syz-executor420:5062 blocked for more than 143 seconds. [ 286.481670][ T29] Not tainted 6.7.0-rc2-syzkaller #0 [ 286.487517][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.496248][ T29] task:syz-executor420 state:D stack:25456 pid:5062 tgid:5062 ppid:5061 flags:0x00004006 [ 286.506467][ T29] Call Trace: [ 286.509763][ T29] [ 286.512696][ T29] __schedule+0x1961/0x4ab0 [ 286.517342][ T29] ? release_firmware_map_entry+0x190/0x190 [ 286.523258][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 286.528411][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 286.533500][ T29] ? schedule+0x8e/0x260 [ 286.537759][ T29] schedule+0x149/0x260 [ 286.541908][ T29] schedule_timeout+0xb0/0x300 [ 286.546718][ T29] ? console_conditional_schedule+0x40/0x40 [ 286.552622][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 286.558686][ T29] ? wait_for_completion+0x2fd/0x620 [ 286.564026][ T29] ? wait_for_completion+0x2fd/0x620 [ 286.569307][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.574536][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 286.579785][ T29] ? wait_for_completion+0x2fd/0x620 [ 286.585105][ T29] wait_for_completion+0x354/0x620 [ 286.590233][ T29] ? io_schedule+0x100/0x100 [ 286.594868][ T29] ? flush_workqueue_prep_pwqs+0x459/0x4c0 [ 286.600713][ T29] ? check_flush_dependency+0xb2/0x380 [ 286.606207][ T29] __flush_workqueue+0x730/0x1630 [ 286.611240][ T29] ? dd_dispatch_request+0x9c0/0x9c0 [ 286.616580][ T29] ? rcu_work_rcufn+0x140/0x140 [ 286.621440][ T29] ? blk_freeze_queue_start+0x100/0x100 [ 286.627030][ T29] ? ktime_get_mono_fast_ns+0x1bd/0x1e0 [ 286.632600][ T29] ? blk_mq_unquiesce_queue+0xc0/0x120 [ 286.638098][ T29] nbd_ioctl+0xbcd/0xf40 [ 286.642365][ T29] ? nbd_release+0x130/0x130 [ 286.646981][ T29] ? __asan_memset+0x23/0x40 [ 286.651600][ T29] ? wake_bit_function+0x220/0x220 [ 286.656761][ T29] ? smack_file_alloc_security+0xe0/0xe0 [ 286.662418][ T29] ? nbd_release+0x130/0x130 [ 286.667044][ T29] blkdev_ioctl+0x5cf/0x730 [ 286.671554][ T29] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 286.677063][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 286.682032][ T29] ? security_file_ioctl+0x81/0xa0 [ 286.687194][ T29] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 286.692695][ T29] __se_sys_ioctl+0xf8/0x170 [ 286.697345][ T29] do_syscall_64+0x45/0x110 [ 286.701871][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 286.707852][ T29] RIP: 0033:0x7ff00cd39879 [ 286.712268][ T29] RSP: 002b:00007ffd45a385e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.720719][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff00cd39879 [ 286.728747][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.736773][ T29] RBP: 00007ff00cdac5f0 R08: 0000000000000006 R09: 0000000000000006 [ 286.744801][ T29] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 286.752775][ T29] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 286.760796][ T29] [ 286.763877][ T29] [ 286.763877][ T29] Showing all locks held in the system: [ 286.771605][ T29] 1 lock held by khungtaskd/29: [ 286.776503][ T29] #0: ffffffff8d92d060 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.786434][ T29] 2 locks held by kworker/u5:1/4460: [ 286.791700][ T29] #0: ffff88801ccbf938 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 286.802955][ T29] #1: ffffc9000de5fd20 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 286.814749][ T29] 2 locks held by getty/4824: [ 286.819403][ T29] #0: ffff88814b8d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.829203][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 286.839348][ T29] [ 286.841656][ T29] ============================================= [ 286.841656][ T29] [ 286.850139][ T29] NMI backtrace for cpu 1 [ 286.854464][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc2-syzkaller #0 [ 286.862508][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 286.872541][ T29] Call Trace: [ 286.875804][ T29] [ 286.878719][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 286.883387][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 286.888846][ T29] ? panic+0x850/0x850 [ 286.892919][ T29] ? vprintk_emit+0x607/0x720 [ 286.897598][ T29] ? printk_sprint+0x480/0x480 [ 286.902357][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 286.907331][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 286.913490][ T29] ? _printk+0xd5/0x120 [ 286.917644][ T29] ? panic+0x850/0x850 [ 286.921712][ T29] ? __wake_up_klogd+0xcc/0x100 [ 286.926563][ T29] ? panic+0x850/0x850 [ 286.930642][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.936729][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 286.942709][ T29] watchdog+0xfaf/0xff0 [ 286.946868][ T29] ? watchdog+0x1e9/0xff0 [ 286.951198][ T29] kthread+0x2d3/0x370 [ 286.955258][ T29] ? hungtask_pm_notify+0x90/0x90 [ 286.960293][ T29] ? kthread_blkcg+0xd0/0xd0 [ 286.964874][ T29] ret_from_fork+0x48/0x80 [ 286.969282][ T29] ? kthread_blkcg+0xd0/0xd0 [ 286.973860][ T29] ret_from_fork_asm+0x11/0x20 [ 286.978647][ T29] [ 286.982073][ T29] Sending NMI from CPU 1 to CPUs 0: [ 286.987350][ C0] NMI backtrace for cpu 0 [ 286.987359][ C0] CPU: 0 PID: 2862 Comm: kworker/u4:11 Not tainted 6.7.0-rc2-syzkaller #0 [ 286.987375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 286.987384][ C0] Workqueue: events_unbound toggle_allocation_gate [ 286.987409][ C0] RIP: 0010:kasan_check_range+0x8c/0x290 [ 286.987428][ C0] Code: 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c5 01 00 00 <49> ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 [ 286.987440][ C0] RSP: 0018:ffffc9000a637670 EFLAGS: 00000046 [ 286.987452][ C0] RAX: 0000000000000001 RBX: 1ffffffff1e01815 RCX: ffffffff816d25a4 [ 286.987462][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f00c0a8 [ 286.987472][ C0] RBP: ffffffffffffffff R08: ffffffff8f00c0af R09: 1ffffffff1e01815 [ 286.987483][ C0] R10: dffffc0000000000 R11: fffffbfff1e01815 R12: 1ffff920014c6edc [ 286.987493][ C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff1e01816 [ 286.987505][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 286.987517][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.987527][ C0] CR2: 00007fa73c0ef580 CR3: 000000000d730000 CR4: 00000000003506f0 [ 286.987540][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.987548][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.987557][ C0] Call Trace: [ 286.987563][ C0] [ 286.987569][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 286.987588][ C0] ? read_lock_is_recursive+0x20/0x20 [ 286.987608][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 286.987627][ C0] ? nmi_handle+0x2a/0x570 [ 286.987652][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.987672][ C0] ? nmi_handle+0x14c/0x570 [ 286.987689][ C0] ? nmi_handle+0x2a/0x570 [ 286.987707][ C0] ? kasan_check_range+0x8c/0x290 [ 286.987724][ C0] ? default_do_nmi+0x63/0x150 [ 286.987742][ C0] ? exc_nmi+0x121/0x210 [ 286.987759][ C0] ? end_repeat_nmi+0xf/0x2a [ 286.987783][ C0] ? lock_acquire+0xd4/0x530 [ 286.987800][ C0] ? kasan_check_range+0x8c/0x290 [ 286.987817][ C0] ? kasan_check_range+0x8c/0x290 [ 286.987834][ C0] ? kasan_check_range+0x8c/0x290 [ 286.987851][ C0] [ 286.987855][ C0] [ 286.987861][ C0] lock_acquire+0xd4/0x530 [ 286.987881][ C0] ? read_lock_is_recursive+0x20/0x20 [ 286.987898][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.987920][ C0] ? _raw_spin_unlock+0x40/0x40 [ 286.987945][ C0] ? debug_object_assert_init+0x2c8/0x420 [ 286.987990][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 286.988010][ C0] ? lock_timer_base+0x120/0x260 [ 286.988025][ C0] ? _raw_spin_lock+0x40/0x40 [ 286.988050][ C0] lock_timer_base+0x120/0x260 [ 286.988068][ C0] __mod_timer+0x1b8/0xf40 [ 286.988088][ C0] ? text_poke_sync+0x30/0x30 [ 286.988103][ C0] ? text_poke_sync+0x30/0x30 [ 286.988117][ C0] ? on_each_cpu_cond_mask+0x62/0x80 [ 286.988139][ C0] ? mod_timer_pending+0x30/0x30 [ 286.988160][ C0] ? __queue_delayed_work+0x16b/0x210 [ 286.988177][ C0] queue_delayed_work_on+0x15a/0x260 [ 286.988194][ C0] ? delayed_work_timer_fn+0x80/0x80 [ 286.988207][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 286.988225][ C0] ? rcu_read_lock_bh_held+0x120/0x120 [ 286.988248][ C0] toggle_allocation_gate+0x1ff/0x250 [ 286.988269][ C0] ? show_object+0x70/0x70 [ 286.988289][ C0] ? wake_bit_function+0x220/0x220 [ 286.988311][ C0] ? process_scheduled_works+0x825/0x1420 [ 286.988329][ C0] process_scheduled_works+0x90f/0x1420 [ 286.988360][ C0] ? assign_work+0x3d0/0x3d0 [ 286.988380][ C0] ? assign_work+0x364/0x3d0 [ 286.988400][ C0] worker_thread+0xa5f/0x1000 [ 286.988429][ C0] kthread+0x2d3/0x370 [ 286.988443][ C0] ? pr_cont_work+0x5e0/0x5e0 [ 286.988459][ C0] ? kthread_blkcg+0xd0/0xd0 [ 286.988473][ C0] ret_from_fork+0x48/0x80 [ 286.988489][ C0] ? kthread_blkcg+0xd0/0xd0 [ 286.988503][ C0] ret_from_fork_asm+0x11/0x20 [ 286.988530][ C0] [ 286.988536][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.185 msecs [ 286.989469][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.397182][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc2-syzkaller #0 [ 287.405243][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 287.415302][ T29] Call Trace: [ 287.418574][ T29] [ 287.421497][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 287.426176][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.431629][ T29] ? panic+0x850/0x850 [ 287.435695][ T29] ? vscnprintf+0x5d/0x80 [ 287.440015][ T29] panic+0x349/0x850 [ 287.443909][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.450062][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 287.455345][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.461408][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.466789][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.472962][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 287.479119][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 287.485273][ T29] watchdog+0xfee/0xff0 [ 287.489430][ T29] ? watchdog+0x1e9/0xff0 [ 287.493764][ T29] kthread+0x2d3/0x370 [ 287.497827][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.502861][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.507452][ T29] ret_from_fork+0x48/0x80 [ 287.511863][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.516442][ T29] ret_from_fork_asm+0x11/0x20 [ 287.521211][ T29] [ 287.524426][ T29] Kernel Offset: disabled [ 287.528739][ T29] Rebooting in 86400 seconds..