./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2082593825 <...> DUID 00:04:92:3d:a4:bf:d8:99:95:1d:d2:9f:0e:34:7d:20:a7:e6 forked to background, child pid 3188 [ 27.119158][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.134275][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts. execve("./syz-executor2082593825", ["./syz-executor2082593825"], 0x7ffd953d3620 /* 10 vars */) = 0 brk(NULL) = 0x5555556d5000 brk(0x5555556d5c40) = 0x5555556d5c40 arch_prctl(ARCH_SET_FS, 0x5555556d5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2082593825", 4096) = 28 brk(0x5555556f6c40) = 0x5555556f6c40 brk(0x5555556f7000) = 0x5555556f7000 mprotect(0x7f6868dbc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556d55d0) = 3611 ./strace-static-x86_64: Process 3611 attached [pid 3611] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setsid() = 1 [pid 3611] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3611] unshare(CLONE_NEWNS) = 0 [pid 3611] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3611] unshare(CLONE_NEWIPC) = 0 [pid 3611] unshare(CLONE_NEWCGROUP) = 0 [pid 3611] unshare(CLONE_NEWUTS) = 0 [pid 3611] unshare(CLONE_SYSVSEM) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "16777216", 8) = 8 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "536870912", 9) = 9 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "8192", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3611] close(3) = 0 [pid 3611] getpid() = 1 [pid 3611] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<] _raw_spin_unlock_irq+0x1f/0x40 [ 200.051470][ C1] hardirqs last disabled at (10068): [] __schedule+0x2bac/0x55b0 [ 200.060787][ C1] softirqs last enabled at (9612): [] __irq_exit_rcu+0x123/0x180 [ 200.070370][ C1] softirqs last disabled at (9599): [] __irq_exit_rcu+0x123/0x180 [ 200.080669][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 200.090332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 200.100401][ C1] Workqueue: events_unbound toggle_allocation_gate [ 200.106930][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 200.113723][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 bc fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 <48> 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 9e fe ff ff 66 66 2e 0f [ 200.133355][ C1] RSP: 0018:ffffc90000117940 EFLAGS: 00000202 [ 200.139440][ C1] RAX: 0000000000000001 RBX: ffff8880b9a42220 RCX: 0000000000000000 [ 200.147419][ C1] RDX: ffff888011a6d7c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 200.155402][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 200.163383][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 200.171362][ C1] R13: ffffed1017348445 R14: 0000000000000000 R15: 0000000000000001 [ 200.179342][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 200.188301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.194897][ C1] CR2: 00005555556d55d0 CR3: 000000000bc8e000 CR4: 00000000003506e0 [ 200.202880][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.210860][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.218839][ C1] Call Trace: [ 200.222125][ C1] [ 200.225062][ C1] smp_call_function_many_cond+0x4d9/0x1140 [ 200.230983][ C1] ? optimize_nops+0x2d0/0x2d0 [ 200.235760][ C1] ? smp_call_on_cpu+0x250/0x250 [ 200.240727][ C1] ? text_poke_memset+0x60/0x60 [ 200.245595][ C1] ? optimize_nops+0x2d0/0x2d0 [ 200.250370][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 200.255505][ C1] text_poke_bp_batch+0x233/0x6c0 [ 200.260542][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 200.266639][ C1] ? do_sync_core+0x20/0x20 [ 200.271153][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 200.276642][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 200.282910][ C1] ? __jump_label_update+0x296/0x410 [ 200.288216][ C1] text_poke_finish+0x16/0x30 [ 200.292906][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 200.298910][ C1] jump_label_update+0x32f/0x410 [ 200.303871][ C1] static_key_enable_cpuslocked+0x1b1/0x260 [ 200.309876][ C1] static_key_enable+0x16/0x20 [ 200.314659][ C1] toggle_allocation_gate+0x100/0x390 [ 200.320047][ C1] ? lock_release+0x810/0x810 [ 200.324744][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 200.329973][ C1] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 200.335793][ C1] ? __switch_to+0x5cc/0x10e0 [ 200.340480][ C1] ? __switch_to_asm+0x3a/0x60 [ 200.345264][ C1] ? read_word_at_a_time+0xe/0x20 [ 200.350303][ C1] ? strscpy+0xa1/0x2a0 [ 200.354468][ C1] process_one_work+0x9bf/0x1710 [ 200.359430][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 200.364824][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 200.369784][ C1] worker_thread+0x665/0x1080 [ 200.374483][ C1] ? process_one_work+0x1710/0x1710 [ 200.379702][ C1] kthread+0x2e4/0x3a0 [ 200.383793][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 200.389441][ C1] ret_from_fork+0x1f/0x30 [ 200.393898][ C1] [ 200.396930][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 200.403636][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Tainted: G L 6.0.0-rc6-next-20220923-syzkaller #0 [ 200.414587][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 200.424659][ C1] Workqueue: events_unbound toggle_allocation_gate [ 200.431191][ C1] Call Trace: [ 200.434566][ C1] [ 200.437416][ C1] dump_stack_lvl+0xcd/0x134 [ 200.442040][ C1] panic+0x2c8/0x622 [ 200.445956][ C1] ? panic_print_sys_info.part.0+0x110/0x110 [ 200.451963][ C1] ? watchdog_timer_fn.cold+0x5/0x25 [ 200.457304][ C1] watchdog_timer_fn.cold+0x16/0x25 [ 200.462531][ C1] ? softlockup_fn+0xa0/0xa0 [ 200.467147][ C1] __hrtimer_run_queues+0x1c6/0xfb0 [ 200.472387][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 200.478390][ C1] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 200.484488][ C1] hrtimer_interrupt+0x31c/0x790 [ 200.489456][ C1] __sysvec_apic_timer_interrupt+0x17c/0x640 [ 200.495458][ C1] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 200.501206][ C1] [ 200.504146][ C1] [ 200.507081][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 200.513094][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 200.519884][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 bc fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 <48> 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 9e fe ff ff 66 66 2e 0f [ 200.539513][ C1] RSP: 0018:ffffc90000117940 EFLAGS: 00000202 [ 200.545682][ C1] RAX: 0000000000000001 RBX: ffff8880b9a42220 RCX: 0000000000000000 [ 200.553666][ C1] RDX: ffff888011a6d7c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 200.561654][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 200.569642][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 200.577630][ C1] R13: ffffed1017348445 R14: 0000000000000000 R15: 0000000000000001 [ 200.585717][ C1] smp_call_function_many_cond+0x4d9/0x1140 [ 200.591653][ C1] ? optimize_nops+0x2d0/0x2d0 [ 200.596442][ C1] ? smp_call_on_cpu+0x250/0x250 [ 200.601413][ C1] ? text_poke_memset+0x60/0x60 [ 200.606291][ C1] ? optimize_nops+0x2d0/0x2d0 [ 200.611076][ C1] on_each_cpu_cond_mask+0x56/0xa0 [ 200.616218][ C1] text_poke_bp_batch+0x233/0x6c0 [ 200.621275][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 200.627388][ C1] ? do_sync_core+0x20/0x20 [ 200.631915][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 200.637410][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 200.643690][ C1] ? __jump_label_update+0x296/0x410 [ 200.649015][ C1] text_poke_finish+0x16/0x30 [ 200.653715][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 200.659744][ C1] jump_label_update+0x32f/0x410 [ 200.664719][ C1] static_key_enable_cpuslocked+0x1b1/0x260 [ 200.670652][ C1] static_key_enable+0x16/0x20 [ 200.675453][ C1] toggle_allocation_gate+0x100/0x390 [ 200.680855][ C1] ? lock_release+0x810/0x810 [ 200.685555][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 200.690777][ C1] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 200.696603][ C1] ? __switch_to+0x5cc/0x10e0 [ 200.701298][ C1] ? __switch_to_asm+0x3a/0x60 [ 200.706094][ C1] ? read_word_at_a_time+0xe/0x20 [ 200.711141][ C1] ? strscpy+0xa1/0x2a0 [ 200.715317][ C1] process_one_work+0x9bf/0x1710 [ 200.720283][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 200.725687][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 200.730659][ C1] worker_thread+0x665/0x1080 [ 200.735364][ C1] ? process_one_work+0x1710/0x1710 [ 200.740592][ C1] kthread+0x2e4/0x3a0 [ 200.744687][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 200.750355][ C1] ret_from_fork+0x1f/0x30 [ 200.754810][ C1] [ 201.864934][ C1] Shutting down cpus with NMI [ 201.869854][ C1] Kernel Offset: disabled [ 201.874175][ C1] Rebooting in 86400 seconds..