./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2656498963 <...> Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. execve("./syz-executor2656498963", ["./syz-executor2656498963"], 0x7ffc0e97cb60 /* 10 vars */) = 0 brk(NULL) = 0x555556d78000 brk(0x555556d78d00) = 0x555556d78d00 arch_prctl(ARCH_SET_FS, 0x555556d78380) = 0 set_tid_address(0x555556d78650) = 5061 set_robust_list(0x555556d78660, 24) = 0 rseq(0x555556d78ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2656498963", 4096) = 28 getrandom("\xb8\x06\x9e\x12\x25\xdc\x92\xe0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d78d00 brk(0x555556d99d00) = 0x555556d99d00 brk(0x555556d9a000) = 0x555556d9a000 mprotect(0x7f5a0f7a2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d78650) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555556d78660, 24) = 0 [pid 5062] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setsid() = 1 [pid 5062] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5062] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5062] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5062] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5062] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5062] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5062] unshare(CLONE_NEWNS) = 0 [pid 5062] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5062] unshare(CLONE_NEWIPC) = 0 [pid 5062] unshare(CLONE_NEWCGROUP) = 0 [pid 5062] unshare(CLONE_NEWUTS) = 0 [pid 5062] unshare(CLONE_SYSVSEM) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "16777216", 8) = 8 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "536870912", 9) = 9 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1024", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "8192", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1024", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1024", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5062] close(3) = 0 [pid 5062] getpid() = 1 [pid 5062] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5062] kill(-2, SIGKILL) = 0 [pid 5062] kill(2, SIGKILL) = 0 [pid 5062] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x555556d796f0 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, 0x555556d796f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 76.875236][ T780] cfg80211: failed to load regulatory.db [ 286.793495][ T29] INFO: task kworker/1:1:27 blocked for more than 143 seconds. [ 286.801249][ T29] Not tainted 6.7.0-rc8-syzkaller #0 [ 286.807204][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.815956][ T29] task:kworker/1:1 state:D stack:25496 pid:27 tgid:27 ppid:2 flags:0x00004000 [ 286.826323][ T29] Workqueue: usb_hub_wq hub_event [ 286.831546][ T29] Call Trace: [ 286.835299][ T29] [ 286.838247][ T29] __schedule+0x1961/0x4ab0 [ 286.842871][ T29] ? release_firmware_map_entry+0x190/0x190 [ 286.848860][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 286.854106][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 286.860096][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.865344][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 286.870648][ T29] ? schedule+0x8e/0x260 [ 286.874969][ T29] schedule+0x149/0x260 [ 286.879161][ T29] usb_kill_urb+0x1c9/0x300 [ 286.883743][ T29] ? usb_unlink_urb+0xa0/0xa0 [ 286.888434][ T29] ? wake_bit_function+0x220/0x220 [ 286.893655][ T29] usb_start_wait_urb+0x1b0/0x520 [ 286.898710][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 286.904596][ T29] ? trace_kmalloc+0x1f/0xa0 [ 286.909292][ T29] usb_control_msg+0x2b1/0x4c0 [ 286.914152][ T29] ? usb_anchor_empty+0x40/0x40 [ 286.919041][ T29] hub_port_init+0xaa6/0x23a0 [ 286.923854][ T29] hub_event+0x29e5/0x5050 [ 286.928326][ T29] ? led_work+0x770/0x770 [ 286.932666][ T29] ? read_lock_is_recursive+0x20/0x20 [ 286.938156][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 286.944241][ T29] ? print_irqtrace_events+0x220/0x220 [ 286.949725][ T29] ? process_scheduled_works+0x825/0x1420 [ 286.955577][ T29] process_scheduled_works+0x90f/0x1420 [ 286.961211][ T29] ? assign_work+0x3d0/0x3d0 [ 286.965873][ T29] ? assign_work+0x364/0x3d0 [ 286.970463][ T29] worker_thread+0xa5f/0x1000 [ 286.975203][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.981138][ T29] kthread+0x2d3/0x370 [ 286.985333][ T29] ? pr_cont_work+0x5e0/0x5e0 [ 286.990052][ T29] ? kthread_blkcg+0xd0/0xd0 [ 286.994710][ T29] ret_from_fork+0x48/0x80 [ 286.999213][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.003856][ T29] ret_from_fork_asm+0x11/0x20 [ 287.008829][ T29] [ 287.012867][ T29] INFO: task syz-executor265:5065 blocked for more than 143 seconds. [ 287.021093][ T29] Not tainted 6.7.0-rc8-syzkaller #0 [ 287.027048][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.035794][ T29] task:syz-executor265 state:D stack:25112 pid:5065 tgid:5065 ppid:5062 flags:0x00004006 [ 287.046034][ T29] Call Trace: [ 287.049356][ T29] [ 287.052281][ T29] __schedule+0x1961/0x4ab0 [ 287.056889][ T29] ? release_firmware_map_entry+0x190/0x190 [ 287.062803][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 287.067881][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 287.073408][ T29] ? schedule+0x8e/0x260 [ 287.077674][ T29] schedule+0x149/0x260 [ 287.081853][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.087361][ T29] __mutex_lock+0x6a3/0xd60 [ 287.091901][ T29] ? __mutex_lock+0x526/0xd60 [ 287.096636][ T29] ? usbdev_release+0x7a/0x7a0 [ 287.101415][ T29] ? mutex_lock_nested+0x20/0x20 [ 287.106398][ T29] ? __fsnotify_parent+0x4d6/0x730 [ 287.111588][ T29] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 287.118580][ T29] usbdev_release+0x7a/0x7a0 [ 287.123188][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 287.128266][ T29] ? usbdev_open+0x770/0x770 [ 287.132880][ T29] __fput+0x3cc/0x9e0 [ 287.137042][ T29] __x64_sys_close+0x7e/0x100 [ 287.141743][ T29] do_syscall_64+0x45/0x110 [ 287.146307][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.152281][ T29] RIP: 0033:0x7f5a0f72e0e0 [ 287.156761][ T29] RSP: 002b:00007ffe92c8d308 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 287.165313][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5a0f72e0e0 [ 287.173334][ T29] RDX: 0000000000000007 RSI: 00007ffe92c8ce40 RDI: 0000000000000003 [ 287.181330][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.189420][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 287.197587][ T29] R13: 00007ffe92c8d5b8 R14: 0000000000000001 R15: 00007ffe92c8d350 [ 287.205691][ T29] [ 287.208743][ T29] [ 287.208743][ T29] Showing all locks held in the system: [ 287.216523][ T29] 5 locks held by kworker/1:1/27: [ 287.221542][ T29] #0: ffff88814827a138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 287.232914][ T29] #1: ffffc90000a2fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 287.244825][ T29] #2: ffff888142796190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5050 [ 287.253753][ T29] #3: ffff8881427ba510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x264e/0x5050 [ 287.263749][ T29] #4: ffff888141fd3d68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2682/0x5050 [ 287.273766][ T29] 1 lock held by khungtaskd/29: [ 287.278631][ T29] #0: ffffffff8d92dae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.288587][ T29] 2 locks held by getty/4813: [ 287.293443][ T29] #0: ffff8880265ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.303383][ T29] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 287.313600][ T29] 1 lock held by syz-executor265/5065: [ 287.319079][ T29] #0: ffff888142796190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x7a/0x7a0 [ 287.328312][ T29] [ 287.330652][ T29] ============================================= [ 287.330652][ T29] [ 287.339167][ T29] NMI backtrace for cpu 1 [ 287.343508][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc8-syzkaller #0 [ 287.351579][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.361632][ T29] Call Trace: [ 287.364905][ T29] [ 287.367823][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 287.372521][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.377975][ T29] ? panic+0x850/0x850 [ 287.382049][ T29] ? vprintk_emit+0x607/0x720 [ 287.386718][ T29] ? printk_sprint+0x480/0x480 [ 287.391470][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 287.396469][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 287.402615][ T29] ? _printk+0xd5/0x120 [ 287.406760][ T29] ? panic+0x850/0x850 [ 287.410812][ T29] ? __wake_up_klogd+0xcc/0x100 [ 287.415654][ T29] ? panic+0x850/0x850 [ 287.419709][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.425788][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 287.431787][ T29] watchdog+0xfaf/0xff0 [ 287.436158][ T29] ? watchdog+0x1e9/0xff0 [ 287.440488][ T29] kthread+0x2d3/0x370 [ 287.444640][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.449743][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.454319][ T29] ret_from_fork+0x48/0x80 [ 287.458725][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.463310][ T29] ret_from_fork_asm+0x11/0x20 [ 287.468081][ T29] [ 287.471214][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.476484][ C0] NMI backtrace for cpu 0 [ 287.476496][ C0] CPU: 0 PID: 2438 Comm: kworker/u4:7 Not tainted 6.7.0-rc8-syzkaller #0 [ 287.476514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.476523][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.476569][ C0] RIP: 0010:lock_is_held_type+0x95/0x190 [ 287.476591][ C0] Code: 24 24 fa 48 c7 c7 a0 b1 6a 8b e8 26 1a 00 00 65 ff 05 ff e6 ea 74 41 83 bd b8 0a 00 00 00 7e 47 4c 89 eb 48 81 c3 c0 0a 00 00 <31> ed 48 83 fd 31 73 24 48 89 df 4c 89 fe e8 48 02 00 00 85 c0 75 [ 287.476604][ C0] RSP: 0018:ffffc9000a0375b8 EFLAGS: 00000082 [ 287.476617][ C0] RAX: 0000000000000000 RBX: ffff888025f0a880 RCX: dffffc0000000000 [ 287.476629][ C0] RDX: 0000000000000009 RSI: ffffffff8b6ab1a0 RDI: ffffffff8bbde0e0 [ 287.476640][ C0] RBP: ffff8880b983c340 R08: ffffffff8f00c22f R09: 1ffffffff1e01845 [ 287.476652][ C0] R10: dffffc0000000000 R11: fffffbfff1e01846 R12: 0000000000000046 [ 287.476663][ C0] R13: ffff888025f09dc0 R14: 00000000ffffffff R15: ffff8880b983c358 [ 287.476675][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.476689][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.476701][ C0] CR2: 00007ffce57d9d6c CR3: 000000000d731000 CR4: 00000000003506f0 [ 287.476715][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.476724][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.476734][ C0] Call Trace: [ 287.476740][ C0] [ 287.476746][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 287.476769][ C0] ? read_lock_is_recursive+0x20/0x20 [ 287.476789][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 287.476818][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.476838][ C0] ? nmi_handle+0x14c/0x570 [ 287.476858][ C0] ? nmi_handle+0x2a/0x570 [ 287.476876][ C0] ? lock_is_held_type+0x95/0x190 [ 287.476891][ C0] ? default_do_nmi+0x63/0x150 [ 287.476913][ C0] ? exc_nmi+0x121/0x210 [ 287.476934][ C0] ? end_repeat_nmi+0xf/0x2a [ 287.476954][ C0] ? lock_is_held_type+0x95/0x190 [ 287.476970][ C0] ? lock_is_held_type+0x95/0x190 [ 287.476986][ C0] ? lock_is_held_type+0x95/0x190 [ 287.477002][ C0] [ 287.477007][ C0] [ 287.477014][ C0] update_curr+0x10c/0xe90 [ 287.477034][ C0] dequeue_entity+0x85/0x13e0 [ 287.477066][ C0] ? rcu_is_watching+0x15/0xb0 [ 287.477089][ C0] dequeue_task_fair+0x270/0x12c0 [ 287.477111][ C0] ? enqueue_task_fair+0xbf0/0xbf0 [ 287.477137][ C0] __schedule+0x61a/0x4ab0 [ 287.477167][ C0] ? release_firmware_map_entry+0x190/0x190 [ 287.477188][ C0] ? schedule+0x8e/0x260 [ 287.477207][ C0] ? __lock_acquire+0x1fd0/0x1fd0 [ 287.477223][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.477242][ C0] ? kthread_data+0x52/0xc0 [ 287.477265][ C0] ? schedule+0x8e/0x260 [ 287.477283][ C0] ? wq_worker_sleeping+0x66/0x240 [ 287.477299][ C0] ? schedule+0x8e/0x260 [ 287.477318][ C0] schedule+0x149/0x260 [ 287.477338][ C0] toggle_allocation_gate+0x16a/0x250 [ 287.477359][ C0] ? show_object+0x70/0x70 [ 287.477378][ C0] ? wake_bit_function+0x220/0x220 [ 287.477401][ C0] ? process_scheduled_works+0x825/0x1420 [ 287.477419][ C0] process_scheduled_works+0x90f/0x1420 [ 287.477447][ C0] ? assign_work+0x3d0/0x3d0 [ 287.477467][ C0] ? assign_work+0x364/0x3d0 [ 287.477487][ C0] worker_thread+0xa5f/0x1000 [ 287.477508][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.477530][ C0] kthread+0x2d3/0x370 [ 287.477544][ C0] ? pr_cont_work+0x5e0/0x5e0 [ 287.477561][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.477576][ C0] ret_from_fork+0x48/0x80 [ 287.477594][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.477609][ C0] ret_from_fork_asm+0x11/0x20 [ 287.477634][ C0] [ 287.477640][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.155 msecs [ 287.478960][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.478970][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc8-syzkaller #0 [ 287.478987][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.478995][ T29] Call Trace: [ 287.479002][ T29] [ 287.479008][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 287.479036][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.479058][ T29] ? panic+0x850/0x850 [ 287.479080][ T29] ? vscnprintf+0x5d/0x80 [ 287.479101][ T29] panic+0x349/0x850 [ 287.479120][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.479143][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 287.479164][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.479186][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.479209][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.479229][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 287.479254][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 287.479279][ T29] watchdog+0xfee/0xff0 [ 287.479303][ T29] ? watchdog+0x1e9/0xff0 [ 287.479331][ T29] kthread+0x2d3/0x370 [ 287.479346][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.479367][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.479384][ T29] ret_from_fork+0x48/0x80 [ 287.479400][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.479417][ T29] ret_from_fork_asm+0x11/0x20 [ 287.479448][ T29] [ 287.482215][ T29] Kernel Offset: disabled [ 287.988248][ T29] Rebooting in 86400 seconds..