./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3954174095 <...> Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. execve("./syz-executor3954174095", ["./syz-executor3954174095"], 0x7ffccffa9590 /* 10 vars */) = 0 brk(NULL) = 0x555555a64000 brk(0x555555a64d00) = 0x555555a64d00 arch_prctl(ARCH_SET_FS, 0x555555a64380) = 0 set_tid_address(0x555555a64650) = 5062 set_robust_list(0x555555a64660, 24) = 0 rseq(0x555555a64ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3954174095", 4096) = 28 getrandom("\x4d\x37\x4c\xe6\xe9\x2c\xd8\x05", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555a64d00 brk(0x555555a85d00) = 0x555555a85d00 brk(0x555555a86000) = 0x555555a86000 mprotect(0x7f262edeb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x555555a64650) = 5063 [pid 5063] set_robust_list(0x555555a64660, 24) = 0 [pid 5063] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setsid() = 1 [pid 5063] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5063] unshare(CLONE_NEWNS) = 0 [pid 5063] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5063] unshare(CLONE_NEWIPC) = 0 [pid 5063] unshare(CLONE_NEWCGROUP) = 0 [pid 5063] unshare(CLONE_NEWUTS) = 0 [pid 5063] unshare(CLONE_SYSVSEM) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "16777216", 8) = 8 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "536870912", 9) = 9 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "8192", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5063] close(3) = 0 [pid 5063] getpid() = 1 [pid 5063] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5063] kill(-2, SIGKILL) = 0 [pid 5063] kill(2, SIGKILL) = 0 [pid 5063] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x555555a656f0 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, 0x555555a656f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 87.067247][ T923] cfg80211: failed to load regulatory.db [ 286.745241][ T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 286.752828][ T29] Not tainted 6.7.0-rc5-next-20231218-syzkaller #0 [ 286.759906][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.768655][ T29] task:kworker/0:1 state:D stack:25632 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 286.778908][ T29] Workqueue: usb_hub_wq hub_event [ 286.784038][ T29] Call Trace: [ 286.787379][ T29] [ 286.790344][ T29] __schedule+0xf15/0x5c80 [ 286.794804][ T29] ? print_usage_bug.part.0+0x550/0x550 [ 286.800440][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.805812][ T29] ? schedule+0x1fa/0x270 [ 286.810140][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 286.815572][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.820855][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.826166][ T29] schedule+0xe7/0x270 [ 286.830261][ T29] usb_kill_urb.part.0+0x1c6/0x250 [ 286.835449][ T29] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 286.841184][ T29] ? prepare_to_swait_exclusive+0x240/0x240 [ 286.847149][ T29] ? preempt_count_sub+0x160/0x160 [ 286.852321][ T29] usb_kill_urb+0x83/0xa0 [ 286.856694][ T29] usb_start_wait_urb+0x251/0x4c0 [ 286.861742][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 286.867646][ T29] usb_control_msg+0x327/0x4a0 [ 286.872432][ T29] ? usb_start_wait_urb+0x4c0/0x4c0 [ 286.877675][ T29] ? hub_resume+0x3e0/0x3e0 [ 286.882220][ T29] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 286.888382][ T29] hub_port_init+0x68c/0x39e0 [ 286.893089][ T29] hub_event+0x2b61/0x4e10 [ 286.897657][ T29] ? hub_port_debounce+0x3d0/0x3d0 [ 286.902799][ T29] ? check_irq_usage+0x1081/0x1490 [ 286.908022][ T29] ? lock_sync+0x190/0x190 [ 286.912461][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 286.917918][ T29] process_one_work+0x8a4/0x15f0 [ 286.922886][ T29] ? lock_sync+0x190/0x190 [ 286.927382][ T29] ? workqueue_congested+0x300/0x300 [ 286.932710][ T29] ? assign_work+0x1a0/0x250 [ 286.937380][ T29] worker_thread+0x8b6/0x1290 [ 286.942091][ T29] ? process_one_work+0x15f0/0x15f0 [ 286.947362][ T29] kthread+0x2c1/0x3a0 [ 286.951446][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.956701][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.962368][ T29] ret_from_fork+0x45/0x80 [ 286.966889][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.972550][ T29] ret_from_fork_asm+0x11/0x20 [ 286.977397][ T29] [ 286.980488][ T29] INFO: task syz-executor395:5066 blocked for more than 143 seconds. [ 286.988648][ T29] Not tainted 6.7.0-rc5-next-20231218-syzkaller #0 [ 286.995716][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.004388][ T29] task:syz-executor395 state:D stack:26608 pid:5066 tgid:5066 ppid:5063 flags:0x00004006 [ 287.014613][ T29] Call Trace: [ 287.017929][ T29] [ 287.020882][ T29] __schedule+0xf15/0x5c80 [ 287.025381][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.031386][ T29] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.037435][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.042744][ T29] ? schedule+0x1fa/0x270 [ 287.047144][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.052528][ T29] ? __mutex_lock+0x5af/0x9c0 [ 287.057266][ T29] ? __mutex_trylock_common+0x78/0x250 [ 287.062751][ T29] schedule+0xe7/0x270 [ 287.066942][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.072434][ T29] __mutex_lock+0x5b4/0x9c0 [ 287.077003][ T29] ? usbdev_release+0x87/0x470 [ 287.081785][ T29] ? mutex_trylock+0x130/0x130 [ 287.086630][ T29] ? locks_remove_file+0x399/0x5a0 [ 287.091859][ T29] ? free_async+0x4e0/0x4e0 [ 287.096405][ T29] ? usbdev_release+0x87/0x470 [ 287.101183][ T29] usbdev_release+0x87/0x470 [ 287.105869][ T29] ? free_async+0x4e0/0x4e0 [ 287.110383][ T29] __fput+0x270/0xb70 [ 287.114392][ T29] __fput_sync+0x47/0x50 [ 287.118683][ T29] __x64_sys_close+0x86/0xf0 [ 287.123288][ T29] do_syscall_64+0x40/0x110 [ 287.127863][ T29] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 287.133864][ T29] RIP: 0033:0x7f262ed789a0 [ 287.138315][ T29] RSP: 002b:00007ffdc45d8d28 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 287.146804][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f262ed789a0 [ 287.154767][ T29] RDX: 0000000000000007 RSI: 00007ffdc45d8860 RDI: 0000000000000003 [ 287.162798][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.170863][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 287.178926][ T29] R13: 00007f262edf0b20 R14: 00007f262edf2ce0 R15: 00007f262edf0480 [ 287.186989][ T29] [ 287.190016][ T29] [ 287.190016][ T29] Showing all locks held in the system: [ 287.197761][ T29] 5 locks held by kworker/0:1/9: [ 287.202697][ T29] #0: ffff8880186ca938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78c/0x15f0 [ 287.213464][ T29] #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7f6/0x15f0 [ 287.224764][ T29] #2: ffff888021138190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 287.233762][ T29] #3: ffff88802113c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10 [ 287.243820][ T29] #4: ffff888020dfdb68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10 [ 287.253770][ T29] 1 lock held by khungtaskd/29: [ 287.258708][ T29] #0: ffffffff8d1aca20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.268680][ T29] 2 locks held by getty/4819: [ 287.273346][ T29] #0: ffff88814c6c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.283225][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc4/0x1490 [ 287.293400][ T29] 1 lock held by syz-executor395/5066: [ 287.298913][ T29] #0: ffff888021138190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x470 [ 287.308142][ T29] [ 287.310474][ T29] ============================================= [ 287.310474][ T29] [ 287.318937][ T29] NMI backtrace for cpu 0 [ 287.323270][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc5-next-20231218-syzkaller #0 [ 287.332549][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.342615][ T29] Call Trace: [ 287.345891][ T29] [ 287.348829][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.353503][ T29] nmi_cpu_backtrace+0x277/0x390 [ 287.358454][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.363663][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.369649][ T29] watchdog+0xf86/0x1210 [ 287.373925][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.379915][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.385130][ T29] ? __kthread_parkme+0x148/0x220 [ 287.390159][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.396156][ T29] kthread+0x2c1/0x3a0 [ 287.400227][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.405436][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.411077][ T29] ret_from_fork+0x45/0x80 [ 287.415498][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.421150][ T29] ret_from_fork_asm+0x11/0x20 [ 287.425935][ T29] [ 287.429063][ T29] Sending NMI from CPU 0 to CPUs 1: [ 287.434295][ C1] NMI backtrace for cpu 1 [ 287.434304][ C1] CPU: 1 PID: 1084 Comm: kworker/u4:6 Not tainted 6.7.0-rc5-next-20231218-syzkaller #0 [ 287.434331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.434343][ C1] Workqueue: 0x0 (events_unbound) [ 287.434365][ C1] RIP: 0010:newidle_balance+0x110/0x1250 [ 287.434398][ C1] Code: b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 9d 0d 00 00 44 8b a3 88 00 00 00 45 85 e4 <0f> 84 82 00 00 00 45 31 e4 48 b8 00 00 00 00 00 fc ff df 48 8b 74 [ 287.434416][ C1] RSP: 0018:ffffc90004d8fab0 EFLAGS: 00000046 [ 287.434431][ C1] RAX: 0000000000000000 RBX: ffff8880b993cd00 RCX: ffffffff8160402e [ 287.434445][ C1] RDX: 1ffff110173279b1 RSI: ffffc90004d8fd48 RDI: ffff8880b993cd00 [ 287.434459][ C1] RBP: 00000000fffffa44 R08: 0000000000000000 R09: fffffbfff1e741a2 [ 287.434472][ C1] R10: ffffffff8f3a0d17 R11: 0000000000000001 R12: 0000000000000000 [ 287.434485][ C1] R13: ffff88801ebabb80 R14: ffff8880b993cd88 R15: ffff8880b993cd00 [ 287.434499][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 287.434519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.434533][ C1] CR2: 00005589aeb43600 CR3: 000000000cf78000 CR4: 00000000003506f0 [ 287.434546][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.434558][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.434571][ C1] Call Trace: [ 287.434577][ C1] [ 287.434583][ C1] ? show_regs+0x8e/0xa0 [ 287.434609][ C1] ? nmi_cpu_backtrace+0x1d4/0x390 [ 287.434635][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.434664][ C1] ? nmi_handle+0x1a6/0x580 [ 287.434691][ C1] ? newidle_balance+0x110/0x1250 [ 287.434719][ C1] ? default_do_nmi+0x6a/0x160 [ 287.434748][ C1] ? exc_nmi+0x186/0x200 [ 287.434775][ C1] ? end_repeat_nmi+0xf/0x2a [ 287.434860][ C1] ? dequeue_task_fair+0x69e/0xb10 [ 287.434888][ C1] ? newidle_balance+0x110/0x1250 [ 287.434917][ C1] ? newidle_balance+0x110/0x1250 [ 287.434946][ C1] ? newidle_balance+0x110/0x1250 [ 287.434975][ C1] [ 287.434980][ C1] [ 287.434990][ C1] ? rcu_read_lock_sched_held+0x3a/0x70 [ 287.435012][ C1] ? update_load_avg+0x17d2/0x1ec0 [ 287.435039][ C1] ? load_balance+0x3320/0x3320 [ 287.435071][ C1] ? dequeue_entity+0x35a/0x1130 [ 287.435096][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.435121][ C1] ? rcu_is_watching+0x12/0xb0 [ 287.435147][ C1] pick_next_task_fair+0x87/0x1200 [ 287.435179][ C1] __schedule+0x4b1/0x5c80 [ 287.435207][ C1] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.435234][ C1] ? __print_lock_name+0x1f0/0x260 [ 287.435263][ C1] ? io_schedule_timeout+0x150/0x150 [ 287.435294][ C1] ? schedule+0x1fa/0x270 [ 287.435326][ C1] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.435345][ C1] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.435369][ C1] schedule+0xe7/0x270 [ 287.435397][ C1] ? worker_thread+0x271/0x1290 [ 287.435425][ C1] worker_thread+0x2de/0x1290 [ 287.435457][ C1] ? __kthread_parkme+0x148/0x220 [ 287.435481][ C1] ? process_one_work+0x15f0/0x15f0 [ 287.435508][ C1] kthread+0x2c1/0x3a0 [ 287.435532][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.435555][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 287.435581][ C1] ret_from_fork+0x45/0x80 [ 287.435606][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 287.435633][ C1] ret_from_fork_asm+0x11/0x20 [ 287.435667][ C1] [ 287.435674][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.380 msecs [ 287.437404][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.437415][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc5-next-20231218-syzkaller #0 [ 287.437438][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.437450][ T29] Call Trace: [ 287.437457][ T29] [ 287.437464][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.437493][ T29] panic+0x6dc/0x790 [ 287.437523][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 287.437551][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.437586][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.437616][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.437649][ T29] ? watchdog+0xd3d/0x1210 [ 287.437676][ T29] ? watchdog+0xd30/0x1210 [ 287.437706][ T29] watchdog+0xd4e/0x1210 [ 287.437738][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.437764][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.437798][ T29] ? __kthread_parkme+0x148/0x220 [ 287.437830][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.437859][ T29] kthread+0x2c1/0x3a0 [ 287.437883][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.437907][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.437936][ T29] ret_from_fork+0x45/0x80 [ 287.437961][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.437989][ T29] ret_from_fork_asm+0x11/0x20 [ 287.438032][ T29] [ 287.440324][ T29] Kernel Offset: disabled [ 287.914356][ T29] Rebooting in 86400 seconds..