./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1132261603 <...> Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. execve("./syz-executor1132261603", ["./syz-executor1132261603"], 0x7ffce3c34010 /* 10 vars */) = 0 brk(NULL) = 0x555555882000 brk(0x555555882d00) = 0x555555882d00 arch_prctl(ARCH_SET_FS, 0x555555882380) = 0 set_tid_address(0x555555882650) = 5046 set_robust_list(0x555555882660, 24) = 0 rseq(0x555555882ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1132261603", 4096) = 28 getrandom("\x85\x18\x95\xe8\x59\xf6\x5e\x2e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555882d00 brk(0x5555558a3d00) = 0x5555558a3d00 brk(0x5555558a4000) = 0x5555558a4000 mprotect(0x7f2bc4e10000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555882650) = 5047 ./strace-static-x86_64: Process 5047 attached [pid 5047] set_robust_list(0x555555882660, 24) = 0 [pid 5047] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5047] setsid() = 1 [pid 5047] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5047] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5047] unshare(CLONE_NEWNS) = 0 [pid 5047] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5047] unshare(CLONE_NEWIPC) = 0 [pid 5047] unshare(CLONE_NEWCGROUP) = 0 [pid 5047] unshare(CLONE_NEWUTS) = 0 [pid 5047] unshare(CLONE_SYSVSEM) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "16777216", 8) = 8 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "536870912", 9) = 9 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "8192", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5047] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5047] close(3) = 0 [pid 5047] getpid() = 1 [pid 5047] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5047] kill(-2, SIGKILL) = 0 [pid 5047] kill(2, SIGKILL) = 0 [pid 5047] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5047] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5047] getdents64(3, 0x5555558836f0 /* 2 entries */, 32768) = 48 [pid 5047] getdents64(3, 0x5555558836f0 /* 0 entries */, 32768) = 0 [pid 5047] close(3) = 0 [ 82.058672][ T780] cfg80211: failed to load regulatory.db [ 286.856987][ T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 286.864562][ T29] Not tainted 6.8.0-rc1-syzkaller-00385-g4854cf9c61d0 #0 [ 286.872368][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.881229][ T29] task:kworker/0:1 state:D stack:25456 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 286.891512][ T29] Workqueue: usb_hub_wq hub_event [ 286.896690][ T29] Call Trace: [ 286.900049][ T29] [ 286.903003][ T29] __schedule+0x177f/0x4960 [ 286.907783][ T29] ? release_firmware_map_entry+0x190/0x190 [ 286.913707][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 286.918847][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 286.924952][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.930401][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 286.935647][ T29] ? schedule+0x8e/0x260 [ 286.940006][ T29] schedule+0x149/0x260 [ 286.944198][ T29] usb_kill_urb+0x1c9/0x300 [ 286.949298][ T29] ? usb_unlink_urb+0xa0/0xa0 [ 286.954269][ T29] ? wake_bit_function+0x220/0x220 [ 286.959464][ T29] usb_start_wait_urb+0x1b0/0x520 [ 286.964507][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 286.970394][ T29] ? usb_control_msg+0xbb/0x4c0 [ 286.975279][ T29] usb_control_msg+0x2b1/0x4c0 [ 286.980096][ T29] ? usb_anchor_empty+0x40/0x40 [ 286.985049][ T29] ? kmalloc_trace+0x1d6/0x360 [ 286.989909][ T29] ? hub_port_init+0x175/0x2620 [ 286.994776][ T29] hub_port_init+0xbfa/0x2620 [ 286.999546][ T29] hub_event+0x29e5/0x5050 [ 287.005344][ T29] ? led_work+0x770/0x770 [ 287.009739][ T29] ? read_lock_is_recursive+0x20/0x20 [ 287.015116][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 287.021138][ T29] ? print_irqtrace_events+0x220/0x220 [ 287.026612][ T29] ? process_scheduled_works+0x825/0x1420 [ 287.032444][ T29] process_scheduled_works+0x90f/0x1420 [ 287.038051][ T29] ? assign_work+0x3d0/0x3d0 [ 287.042638][ T29] ? assign_work+0x364/0x3d0 [ 287.047337][ T29] worker_thread+0xa5f/0x1000 [ 287.052031][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.058032][ T29] kthread+0x2d3/0x370 [ 287.062111][ T29] ? pr_cont_work+0x5e0/0x5e0 [ 287.066855][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.071453][ T29] ret_from_fork+0x48/0x80 [ 287.075884][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.080526][ T29] ret_from_fork_asm+0x11/0x20 [ 287.085378][ T29] [ 287.088561][ T29] INFO: task syz-executor113:5050 blocked for more than 143 seconds. [ 287.096630][ T29] Not tainted 6.8.0-rc1-syzkaller-00385-g4854cf9c61d0 #0 [ 287.104219][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.112945][ T29] task:syz-executor113 state:D stack:25080 pid:5050 tgid:5050 ppid:5047 flags:0x00004006 [ 287.123171][ T29] Call Trace: [ 287.126463][ T29] [ 287.129457][ T29] __schedule+0x177f/0x4960 [ 287.134019][ T29] ? release_firmware_map_entry+0x190/0x190 [ 287.140000][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 287.145037][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 287.150635][ T29] ? schedule+0x8e/0x260 [ 287.154907][ T29] schedule+0x149/0x260 [ 287.159242][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.164805][ T29] __mutex_lock+0x6a3/0xd60 [ 287.169400][ T29] ? __mutex_lock+0x526/0xd60 [ 287.174084][ T29] ? usbdev_release+0x7a/0x7a0 [ 287.178926][ T29] ? mutex_lock_nested+0x20/0x20 [ 287.183872][ T29] ? __asan_memset+0x23/0x40 [ 287.188578][ T29] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 287.195392][ T29] usbdev_release+0x7a/0x7a0 [ 287.200049][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 287.205090][ T29] ? usbdev_open+0x770/0x770 [ 287.209755][ T29] __fput+0x428/0x890 [ 287.213754][ T29] __x64_sys_close+0x7e/0x100 [ 287.218476][ T29] do_syscall_64+0xf5/0x230 [ 287.223108][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.229129][ T29] RIP: 0033:0x7f2bc4d9c0e0 [ 287.233549][ T29] RSP: 002b:00007ffd36b33308 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 287.242012][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f2bc4d9c0e0 [ 287.250080][ T29] RDX: 0000000000000007 RSI: 00007ffd36b32e40 RDI: 0000000000000003 [ 287.258117][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.266106][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 287.274157][ T29] R13: 00007ffd36b335b8 R14: 0000000000000001 R15: 00007ffd36b33350 [ 287.282267][ T29] [ 287.285287][ T29] [ 287.285287][ T29] Showing all locks held in the system: [ 287.293060][ T29] 5 locks held by kworker/0:1/9: [ 287.298028][ T29] #0: ffff888019abed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 287.309412][ T29] #1: ffffc900000e7d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 287.321310][ T29] #2: ffff888022633190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5050 [ 287.330261][ T29] #3: ffff888022637510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x264e/0x5050 [ 287.340330][ T29] #4: ffff88801e72cd28 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2682/0x5050 [ 287.350103][ T29] 1 lock held by khungtaskd/29: [ 287.354957][ T29] #0: ffffffff8d92f120 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.365178][ T29] 2 locks held by getty/4799: [ 287.369901][ T29] #0: ffff888029bb30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.379782][ T29] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 287.390013][ T29] 1 lock held by syz-executor113/5050: [ 287.395480][ T29] #0: ffff888022633190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x7a/0x7a0 [ 287.404757][ T29] [ 287.407151][ T29] ============================================= [ 287.407151][ T29] [ 287.415575][ T29] NMI backtrace for cpu 0 [ 287.419896][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00385-g4854cf9c61d0 #0 [ 287.429686][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.439739][ T29] Call Trace: [ 287.443012][ T29] [ 287.445936][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 287.450616][ T29] ? tcp_gro_dev_warn+0x260/0x260 [ 287.455638][ T29] ? panic+0x850/0x850 [ 287.459729][ T29] ? vprintk_emit+0x607/0x720 [ 287.464490][ T29] ? printk_sprint+0x480/0x480 [ 287.469256][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 287.474212][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 287.480459][ T29] ? _printk+0xd5/0x120 [ 287.484629][ T29] ? panic+0x850/0x850 [ 287.488725][ T29] ? __wake_up_klogd+0xcc/0x100 [ 287.493602][ T29] ? panic+0x850/0x850 [ 287.497717][ T29] ? __rcu_read_unlock+0x98/0x100 [ 287.502749][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.508816][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 287.514970][ T29] watchdog+0xfaf/0xff0 [ 287.519154][ T29] ? watchdog+0x1e9/0xff0 [ 287.523479][ T29] kthread+0x2d3/0x370 [ 287.527544][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.532586][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.537228][ T29] ret_from_fork+0x48/0x80 [ 287.541685][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.546301][ T29] ret_from_fork_asm+0x11/0x20 [ 287.551106][ T29] [ 287.554283][ T29] Sending NMI from CPU 0 to CPUs 1: [ 287.559553][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x20/0x30 [ 287.560534][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.575531][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00385-g4854cf9c61d0 #0 [ 287.585403][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.595442][ T29] Call Trace: [ 287.598710][ T29] [ 287.601631][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 287.606303][ T29] ? tcp_gro_dev_warn+0x260/0x260 [ 287.611314][ T29] ? panic+0x850/0x850 [ 287.615368][ T29] ? vscnprintf+0x5d/0x80 [ 287.619689][ T29] panic+0x349/0x850 [ 287.623573][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.629722][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 287.634990][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.641043][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.646489][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 287.652657][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 287.658807][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 287.664968][ T29] watchdog+0xfee/0xff0 [ 287.669191][ T29] ? watchdog+0x1e9/0xff0 [ 287.673537][ T29] kthread+0x2d3/0x370 [ 287.677615][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.682734][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.687328][ T29] ret_from_fork+0x48/0x80 [ 287.691745][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.696327][ T29] ret_from_fork_asm+0x11/0x20 [ 287.701099][ T29] [ 287.704309][ T29] Kernel Offset: disabled [ 287.708647][ T29] Rebooting in 86400 seconds..