./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor914113787 <...> Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. execve("./syz-executor914113787", ["./syz-executor914113787"], 0x7ffd16a67a30 /* 10 vars */) = 0 brk(NULL) = 0x55555574b000 brk(0x55555574bd00) = 0x55555574bd00 arch_prctl(ARCH_SET_FS, 0x55555574b380) = 0 set_tid_address(0x55555574b650) = 5060 set_robust_list(0x55555574b660, 24) = 0 rseq(0x55555574bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor914113787", 4096) = 27 getrandom("\xc0\xe9\xd1\x9c\xf7\xb8\x05\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555574bd00 brk(0x55555576cd00) = 0x55555576cd00 brk(0x55555576d000) = 0x55555576d000 mprotect(0x7f80ca5a1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [ 90.871799][ T28] audit: type=1400 audit(1704910388.942:86): avc: denied { execmem } for pid=5060 comm="syz-executor914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.895107][ T28] audit: type=1400 audit(1704910388.962:87): avc: denied { create } for pid=5060 comm="syz-executor914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=784, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5060}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x2e\x00\x00\x00\x98\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 784 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 [ 90.916055][ T28] audit: type=1400 audit(1704910388.982:88): avc: denied { create } for pid=5057 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.936869][ T28] audit: type=1400 audit(1704910388.982:89): avc: denied { write } for pid=5057 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [ 90.957926][ T28] audit: type=1400 audit(1704910388.982:90): avc: denied { nlmsg_read } for pid=5057 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 90.979078][ T28] audit: type=1400 audit(1704910388.982:91): avc: denied { read } for pid=5057 comm="strace-static-x" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 91.000893][ T28] audit: type=1400 audit(1704910388.982:92): avc: denied { write } for pid=5060 comm="syz-executor914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 [ 91.021688][ T28] audit: type=1400 audit(1704910389.002:93): avc: denied { read } for pid=5060 comm="syz-executor914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 [ 91.110770][ T28] audit: type=1400 audit(1704910389.182:94): avc: denied { read } for pid=4725 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5060}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x55555574b650) = 5063 [pid 5063] set_robust_list(0x55555574b660, 24) = 0 [pid 5063] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setsid() = 1 [pid 5063] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [ 91.221094][ T28] audit: type=1400 audit(1704910389.292:95): avc: denied { mounton } for pid=5063 comm="syz-executor914" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [pid 5063] unshare(CLONE_NEWNS) = 0 [pid 5063] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5063] unshare(CLONE_NEWIPC) = 0 [pid 5063] unshare(CLONE_NEWCGROUP) = 0 [pid 5063] unshare(CLONE_NEWUTS) = 0 [pid 5063] unshare(CLONE_SYSVSEM) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "16777216", 8) = 8 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "536870912", 9) = 9 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "8192", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5063] close(3) = 0 [pid 5063] getpid() = 1 [pid 5063] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5063] kill(-2, SIGKILL) = 0 [pid 5063] kill(2, SIGKILL) = 0 [pid 5063] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555574c6f0 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, 0x55555574c6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 97.687852][ T1049] cfg80211: failed to load regulatory.db [ 138.650744][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.657179][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.090753][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.097240][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.531060][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.537815][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.127077][ T29] INFO: task kworker/1:0:23 blocked for more than 143 seconds. [ 287.134769][ T29] Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0 [ 287.142040][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.150777][ T29] task:kworker/1:0 state:D stack:27088 pid:23 tgid:23 ppid:2 flags:0x00004000 [ 287.161057][ T29] Workqueue: usb_hub_wq hub_event [ 287.166164][ T29] Call Trace: [ 287.169502][ T29] [ 287.172457][ T29] __schedule+0xf12/0x5c00 [ 287.176897][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.182355][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.187804][ T29] ? rcu_is_watching+0x12/0xb0 [ 287.192621][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.197987][ T29] ? lock_release+0x4bf/0x690 [ 287.202719][ T29] ? schedule+0x1fc/0x270 [ 287.207114][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.212566][ T29] ? spin_bug+0x1d0/0x1d0 [ 287.216980][ T29] ? rcu_is_watching+0x12/0xb0 [ 287.221789][ T29] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 287.227856][ T29] schedule+0xe9/0x270 [ 287.231973][ T29] usb_kill_urb.part.0+0x1c6/0x250 [ 287.237181][ T29] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 287.242963][ T29] ? prepare_to_swait_exclusive+0x240/0x240 [ 287.248942][ T29] ? preempt_count_sub+0x160/0x160 [ 287.254091][ T29] usb_kill_urb+0x83/0xa0 [ 287.258491][ T29] usb_start_wait_urb+0x251/0x4c0 [ 287.263564][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 287.269461][ T29] usb_control_msg+0x327/0x4a0 [ 287.274279][ T29] ? usb_start_wait_urb+0x4c0/0x4c0 [ 287.279568][ T29] ? hub_resume+0x3e0/0x3e0 [ 287.284147][ T29] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 287.290361][ T29] hub_port_init+0x680/0x3820 [ 287.295093][ T29] hub_event+0x2b61/0x4e10 [ 287.299680][ T29] ? hub_port_debounce+0x3d0/0x3d0 [ 287.304935][ T29] ? lock_acquire+0x464/0x520 [ 287.309703][ T29] ? print_irqtrace_events+0x261/0x270 [ 287.315232][ T29] ? lock_sync+0x190/0x190 [ 287.319740][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.325166][ T29] ? spin_bug+0x1d0/0x1d0 [ 287.329573][ T29] process_one_work+0x886/0x15d0 [ 287.334559][ T29] ? lock_sync+0x190/0x190 [ 287.339049][ T29] ? workqueue_congested+0x300/0x300 [ 287.344658][ T29] ? assign_work+0x1a0/0x250 [ 287.349335][ T29] worker_thread+0x8b9/0x1290 [ 287.354060][ T29] ? process_one_work+0x15d0/0x15d0 [ 287.359327][ T29] kthread+0x2c6/0x3a0 [ 287.363437][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.369141][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.374810][ T29] ret_from_fork+0x45/0x80 [ 287.379319][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.384993][ T29] ret_from_fork_asm+0x11/0x20 [ 287.389830][ T29] [ 287.392965][ T29] INFO: task syz-executor914:5065 blocked for more than 143 seconds. [ 287.401074][ T29] Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0 [ 287.408336][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.417104][ T29] task:syz-executor914 state:D stack:27352 pid:5065 tgid:5065 ppid:5063 flags:0x00004006 [ 287.427368][ T29] Call Trace: [ 287.430679][ T29] [ 287.433629][ T29] __schedule+0xf12/0x5c00 [ 287.438114][ T29] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 287.444177][ T29] ? finish_task_switch.isra.0+0x219/0xca0 [ 287.450091][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.455422][ T29] ? lock_release+0x4bf/0x690 [ 287.460178][ T29] ? schedule+0x1fc/0x270 [ 287.464583][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.470034][ T29] ? __mutex_lock+0x5b4/0x9d0 [ 287.474788][ T29] ? __mutex_trylock_common+0x78/0x250 [ 287.480445][ T29] ? mutex_is_locked+0x40/0x40 [ 287.485358][ T29] ? spin_bug+0x1d0/0x1d0 [ 287.489870][ T29] schedule+0xe9/0x270 [ 287.494023][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.499563][ T29] __mutex_lock+0x5b9/0x9d0 [ 287.504128][ T29] ? locks_remove_posix+0x28e/0x440 [ 287.509438][ T29] ? usbdev_release+0x87/0x470 [ 287.514256][ T29] ? mutex_trylock+0x130/0x130 [ 287.519092][ T29] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 287.525994][ T29] ? locks_remove_file+0x399/0x5a0 [ 287.531188][ T29] ? free_async+0x4e0/0x4e0 [ 287.535847][ T29] ? usbdev_release+0x87/0x470 [ 287.540896][ T29] usbdev_release+0x87/0x470 [ 287.545539][ T29] ? free_async+0x4e0/0x4e0 [ 287.550225][ T29] __fput+0x270/0xb70 [ 287.554253][ T29] __fput_sync+0x47/0x50 [ 287.558564][ T29] __x64_sys_close+0x87/0xf0 [ 287.563218][ T29] do_syscall_64+0xd3/0x250 [ 287.567806][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.574024][ T29] RIP: 0033:0x7f80ca52a5a0 [ 287.578487][ T29] RSP: 002b:00007ffc282e6e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 287.586977][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f80ca52a5a0 [ 287.594968][ T29] RDX: 0000000000000007 RSI: 00007ffc282e6940 RDI: 0000000000000003 [ 287.603008][ T29] RBP: 00000000000f4240 R08: 0000000000000000 R09: 0000000000000000 [ 287.611155][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc282e6e70 [ 287.619323][ T29] R13: 00007ffc282e6e3c R14: 00007ffc282e6e50 R15: 00007ffc282e6e60 [ 287.627357][ T29] [ 287.630417][ T29] INFO: lockdep is turned off. [ 287.635887][ T29] NMI backtrace for cpu 0 [ 287.640650][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0 [ 287.650117][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.660463][ T29] Call Trace: [ 287.663764][ T29] [ 287.666697][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.671305][ T29] nmi_cpu_backtrace+0x277/0x390 [ 287.676255][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.681477][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.687475][ T29] watchdog+0xf87/0x1210 [ 287.691745][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.697766][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.702813][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.708908][ T29] kthread+0x2c6/0x3a0 [ 287.712999][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.718656][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.724315][ T29] ret_from_fork+0x45/0x80 [ 287.728757][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.734589][ T29] ret_from_fork_asm+0x11/0x20 [ 287.739389][ T29] [ 287.742487][ T29] Sending NMI from CPU 0 to CPUs 1: [ 287.747743][ C1] NMI backtrace for cpu 1 [ 287.747754][ C1] CPU: 1 PID: 4500 Comm: klogd Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0 [ 287.747781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.747795][ C1] RIP: 0010:number+0x4ca/0xb80 [ 287.747834][ C1] Code: 44 24 08 e9 99 fd ff ff e8 83 d7 12 f7 49 8d bc 24 20 b8 2e 8b 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 <48> 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 90 06 00 00 0f b6 44 24 [ 287.747857][ C1] RSP: 0018:ffffc900034777a8 EFLAGS: 00000a03 [ 287.747877][ C1] RAX: 0000000000000000 RBX: ffffc90003477b89 RCX: ffffffff8a742ce0 [ 287.747893][ C1] RDX: 1ffffffff165d704 RSI: ffffffff8a742f9d RDI: ffffffff8b2eb826 [ 287.747910][ C1] RBP: 000000000000000a R08: 0000000000000006 R09: 000000000000000a [ 287.747925][ C1] R10: 0000000000000006 R11: fffffffffffe1a08 R12: 0000000000000006 [ 287.747940][ C1] R13: 000000000000000a R14: ffffc90083477b87 R15: 0000000000000000 [ 287.747955][ C1] FS: 00007f027c863380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 287.747980][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.747997][ C1] CR2: 000055cb24ed5600 CR3: 000000007c6d3000 CR4: 00000000003506f0 [ 287.748012][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.748027][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.748042][ C1] Call Trace: [ 287.748051][ C1] [ 287.748058][ C1] ? show_regs+0x8f/0xa0 [ 287.748090][ C1] ? nmi_cpu_backtrace+0x1d4/0x390 [ 287.748115][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.748155][ C1] ? nmi_handle+0x1a6/0x570 [ 287.748186][ C1] ? number+0x4ca/0xb80 [ 287.748216][ C1] ? default_do_nmi+0x6a/0x160 [ 287.748249][ C1] ? exc_nmi+0x186/0x200 [ 287.748279][ C1] ? end_repeat_nmi+0xf/0x2a [ 287.748302][ C1] ? number+0x1f0/0xb80 [ 287.748331][ C1] ? number+0x4ad/0xb80 [ 287.748361][ C1] ? number+0x4ca/0xb80 [ 287.748391][ C1] ? number+0x4ca/0xb80 [ 287.748421][ C1] ? number+0x4ca/0xb80 [ 287.748451][ C1] [ 287.748457][ C1] [ 287.748465][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.748497][ C1] ? put_dec+0xc0/0xc0 [ 287.748529][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.748559][ C1] vsnprintf+0x905/0x1870 [ 287.748596][ C1] ? pointer+0xbf0/0xbf0 [ 287.748634][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.748661][ C1] ? lock_release+0x4bf/0x690 [ 287.748700][ C1] sprintf+0xcd/0x100 [ 287.748735][ C1] ? snprintf+0x100/0x100 [ 287.748770][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.748796][ C1] ? get_data+0x39b/0x540 [ 287.748821][ C1] ? info_print_prefix+0x85/0x350 [ 287.748858][ C1] info_print_prefix+0x2e2/0x350 [ 287.748896][ C1] ? __printk_ratelimit+0x20/0x20 [ 287.748933][ C1] ? get_data+0x540/0x540 [ 287.748957][ C1] record_print_text+0x143/0x410 [ 287.748994][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.749022][ C1] ? find_first_fitting_seq+0x230/0x230 [ 287.749062][ C1] ? prb_final_commit+0xb0/0xb0 [ 287.749089][ C1] syslog_print+0x4e5/0x5d0 [ 287.749127][ C1] ? record_print_text+0x410/0x410 [ 287.749164][ C1] ? avc_has_perm_noaudit+0x145/0x3a0 [ 287.749205][ C1] ? prepare_to_swait_exclusive+0x240/0x240 [ 287.749243][ C1] ? avc_has_perm_noaudit+0x3a0/0x3a0 [ 287.749283][ C1] ? selinux_syslog+0xf2/0x2e0 [ 287.749314][ C1] ? security_syslog+0x84/0xa0 [ 287.749336][ C1] do_syslog+0x2d4/0x580 [ 287.749374][ C1] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 287.749415][ C1] ? xfd_validate_state+0x5d/0x180 [ 287.749459][ C1] __x64_sys_syslog+0x74/0xb0 [ 287.749499][ C1] do_syscall_64+0xd3/0x250 [ 287.749527][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.749567][ C1] RIP: 0033:0x7f027c9c4fa7 [ 287.749585][ C1] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48 [ 287.749607][ C1] RSP: 002b:00007ffdb639f808 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 287.749634][ C1] RAX: ffffffffffffffda RBX: 00007f027cb634a0 RCX: 00007f027c9c4fa7 [ 287.749650][ C1] RDX: 00000000000003ff RSI: 00007f027cb634a0 RDI: 0000000000000002 [ 287.749666][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 1f6777bc89353f2b [ 287.749681][ C1] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f027cb634a0 [ 287.749696][ C1] R13: 00007f027cb53212 R14: 00007f027cb63558 R15: 00007f027cb63558 [ 287.749716][ C1] [ 287.749725][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.982 msecs [ 287.749743][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 288.202864][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-01727-gab27740f7665 #0 [ 288.212347][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 288.222415][ T29] Call Trace: [ 288.225724][ T29] [ 288.228670][ T29] dump_stack_lvl+0xd9/0x1b0 [ 288.233300][ T29] panic+0x6dc/0x790 [ 288.238096][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 288.243252][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 288.248836][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 288.254067][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 288.259482][ T29] ? watchdog+0xd3e/0x1210 [ 288.264021][ T29] ? watchdog+0xd31/0x1210 [ 288.268466][ T29] watchdog+0xd4f/0x1210 [ 288.272742][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.278760][ T29] ? __kthread_parkme+0x14b/0x220 [ 288.283983][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.290001][ T29] kthread+0x2c6/0x3a0 [ 288.294093][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.299756][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.305414][ T29] ret_from_fork+0x45/0x80 [ 288.309859][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.315552][ T29] ret_from_fork_asm+0x11/0x20 [ 288.320454][ T29] [ 288.323818][ T29] Kernel Offset: disabled [ 288.328150][ T29] Rebooting in 86400 seconds..