./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4034248329

<...>
Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts.
execve("./syz-executor4034248329", ["./syz-executor4034248329"], 0x7ffca6d57f50 /* 10 vars */) = 0
brk(NULL)                               = 0x55558016e000
brk(0x55558016ed00)                     = 0x55558016ed00
arch_prctl(ARCH_SET_FS, 0x55558016e380) = 0
set_tid_address(0x55558016e650)         = 5077
set_robust_list(0x55558016e660, 24)     = 0
rseq(0x55558016eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4034248329", 4096) = 28
getrandom("\x05\x65\x25\x73\xdd\x0d\x81\x78", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558016ed00
brk(0x55558018fd00)                     = 0x55558018fd00
brk(0x555580190000)                     = 0x555580190000
mprotect(0x7f5361a47000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558016e650) = 5078
./strace-static-x86_64: Process 5078 attached
[pid  5078] set_robust_list(0x55558016e660, 24) = 0
[pid  5078] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5078] setsid()                    = 1
[pid  5078] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5078] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5078] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5078] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5078] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5078] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5078] unshare(CLONE_NEWNS)        = 0
[pid  5078] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5078] unshare(CLONE_NEWIPC)       = 0
[pid  5078] unshare(CLONE_NEWCGROUP)    = 0
[pid  5078] unshare(CLONE_NEWUTS)       = 0
[pid  5078] unshare(CLONE_SYSVSEM)      = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "16777216", 8)     = 8
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "536870912", 9)    = 9
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1024", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "8192", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1024", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1024", 4)         = 4
[pid  5078] close(3)                    = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5078] close(3)                    = 0
[pid  5078] getpid()                    = 1
[pid  5078] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5078] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5078] unshare(CLONE_NEWNET)       = 0
[pid  5078] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5078] write(3, "0 65535", 7)      = 7
[pid  5078] close(3)                    = 0
[pid  5078] mkdir("/dev/binderfs", 0777) = 0
[pid  5078] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5078] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached
, child_tidptr=0x55558016e650) = 2
[pid  5081] set_robust_list(0x55558016e660, 24) = 0
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5081] setpgid(0, 0)               = 0
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5081] write(3, "1000", 4)         = 4
[pid  5081] close(3)                    = 0
[pid  5081] openat(AT_FDCWD, "/dev/bus/usb/009/001", O_WRONLY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW) = 3
[pid  5081] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0
[pid  5081] openat(AT_FDCWD, "/sys/devices/platform/vhci_hcd.0/attach", O_WRONLY|O_CLOEXEC) = 6
[pid  5081] write(6, "0 4 0 3", 7)      = 7
[pid  5081] close(6)                    = 0
[   74.065624][ T5081] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   74.072314][ T5081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   74.081498][ T5081] vhci_hcd vhci_hcd.0: Device attached
[   74.427973][   T44] usb 9-1: new high-speed USB device number 2 using vhci_hcd
[pid  5081] close(3 <unfinished ...>
[pid  5078] kill(-2, SIGKILL)           = 0
[pid  5078] kill(2, SIGKILL)            = 0
[pid  5078] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5078] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid  5078] getdents64(3, 0x55558016f6f0 /* 2 entries */, 32768) = 48
[pid  5078] getdents64(3, 0x55558016f6f0 /* 0 entries */, 32768) = 0
[pid  5078] close(3)                    = 0
[   87.150398][   T57] cfg80211: failed to load regulatory.db
[  286.827748][   T29] INFO: task kworker/1:1:44 blocked for more than 143 seconds.
[  286.835497][   T29]       Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[  286.843250][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.852146][   T29] task:kworker/1:1     state:D stack:21912 pid:44    tgid:44    ppid:2      flags:0x00004000
[  286.862476][   T29] Workqueue: usb_hub_wq hub_event
[  286.867668][   T29] Call Trace:
[  286.870976][   T29]  <TASK>
[  286.873913][   T29]  __schedule+0x1796/0x4a00
[  286.878804][   T29]  ? __pfx___schedule+0x10/0x10
[  286.883724][   T29]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  286.889840][   T29]  ? __pfx_lock_release+0x10/0x10
[  286.894935][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.900290][   T29]  ? lockdep_hardirqs_on+0x99/0x150
[  286.905539][   T29]  ? schedule+0x90/0x320
[  286.909907][   T29]  schedule+0x14b/0x320
[  286.914316][   T29]  usb_kill_urb+0x1c9/0x300
[  286.919000][   T29]  ? __pfx_usb_kill_urb+0x10/0x10
[  286.924075][   T29]  ? __pfx_autoremove_wake_function+0x10/0x10
[  286.930257][   T29]  usb_start_wait_urb+0x1b0/0x520
[  286.935329][   T29]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  286.941088][   T29]  ? usb_control_msg+0xbb/0x4c0
[  286.945981][   T29]  usb_control_msg+0x2b1/0x4c0
[  286.950828][   T29]  ? __pfx_usb_control_msg+0x10/0x10
[  286.956166][   T29]  ? hub_port_init+0x178/0x2670
[  286.961146][   T29]  ? kmalloc_trace+0x1db/0x370
[  286.966044][   T29]  ? hub_port_init+0x178/0x2670
[  286.971096][   T29]  hub_port_init+0xc21/0x2670
[  286.975844][   T29]  hub_event+0x295f/0x5150
[  286.980410][   T29]  ? __pfx_hub_event+0x10/0x10
[  286.985255][   T29]  ? __pfx_lock_acquire+0x10/0x10
[  286.990477][   T29]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  286.996503][   T29]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  287.003014][   T29]  ? process_scheduled_works+0x91b/0x17c0
[  287.008851][   T29]  process_scheduled_works+0xa10/0x17c0
[  287.014460][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  287.020611][   T29]  ? assign_work+0x364/0x3d0
[  287.025252][   T29]  worker_thread+0x86d/0xd70
[  287.029934][   T29]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  287.035869][   T29]  ? __kthread_parkme+0x169/0x1d0
[  287.041033][   T29]  ? __pfx_worker_thread+0x10/0x10
[  287.046236][   T29]  kthread+0x2f0/0x390
[  287.050396][   T29]  ? __pfx_worker_thread+0x10/0x10
[  287.055546][   T29]  ? __pfx_kthread+0x10/0x10
[  287.060253][   T29]  ret_from_fork+0x4b/0x80
[  287.064706][   T29]  ? __pfx_kthread+0x10/0x10
[  287.069439][   T29]  ret_from_fork_asm+0x1a/0x30
[  287.074266][   T29]  </TASK>
[  287.077455][   T29] INFO: task syz-executor403:5081 blocked for more than 143 seconds.
[  287.085646][   T29]       Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[  287.093256][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.102033][   T29] task:syz-executor403 state:D stack:24664 pid:5081  tgid:5081  ppid:5078   flags:0x00004006
[  287.112285][   T29] Call Trace:
[  287.115600][   T29]  <TASK>
[  287.118654][   T29]  __schedule+0x1796/0x4a00
[  287.123224][   T29]  ? __pfx___schedule+0x10/0x10
[  287.128157][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.133257][   T29]  ? __mutex_trylock_common+0x92/0x2e0
[  287.138857][   T29]  ? schedule+0x90/0x320
[  287.143248][   T29]  schedule+0x14b/0x320
[  287.147422][   T29]  schedule_preempt_disabled+0x13/0x30
[  287.153101][   T29]  __mutex_lock+0x6a4/0xd70
[  287.157819][   T29]  ? __mutex_lock+0x527/0xd70
[  287.162680][   T29]  ? usbdev_release+0x7a/0x7a0
[  287.167477][   T29]  ? __pfx___mutex_lock+0x10/0x10
[  287.172637][   T29]  ? __asan_memset+0x23/0x50
[  287.177272][   T29]  ? __pfx___fsnotify_parent+0x10/0x10
[  287.182858][   T29]  usbdev_release+0x7a/0x7a0
[  287.187502][   T29]  ? __pfx_lock_release+0x10/0x10
[  287.192611][   T29]  ? evm_file_release+0x140/0x1d0
[  287.197747][   T29]  ? __pfx_usbdev_release+0x10/0x10
[  287.203152][   T29]  __fput+0x429/0x8a0
[  287.207147][   T29]  __x64_sys_close+0x7f/0x110
[  287.211949][   T29]  do_syscall_64+0xf5/0x240
[  287.216528][   T29]  ? clear_bhb_loop+0x35/0x90
[  287.221356][   T29]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.227305][   T29] RIP: 0033:0x7f53619d30e0
[  287.231833][   T29] RSP: 002b:00007ffeb0e1e478 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  287.240385][   T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f53619d30e0
[  287.248444][   T29] RDX: 0000000000000007 RSI: 00007ffeb0e1dfb0 RDI: 0000000000000003
[  287.256453][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  287.264550][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240
[  287.272637][   T29] R13: 00007ffeb0e1e718 R14: 0000000000000001 R15: 00007ffeb0e1e4b0
[  287.281169][   T29]  </TASK>
[  287.284249][   T29] 
[  287.284249][   T29] Showing all locks held in the system:
[  287.292402][   T29] 1 lock held by khungtaskd/29:
[  287.297281][   T29]  #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  287.307319][   T29] 5 locks held by kworker/1:1/44:
[  287.312464][   T29]  #0: ffff88801aed5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x8e0/0x17c0
[  287.323940][   T29]  #1: ffffc90000b47d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x91b/0x17c0
[  287.335881][   T29]  #2: ffff888023a65190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[  287.344943][   T29]  #3: ffff888023e38518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150
[  287.355044][   T29]  #4: ffff888022c25468 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150
[  287.365350][   T29] 1 lock held by klogd/4515:
[  287.370426][   T29]  #0: ffff8880b943e658 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  287.380532][   T29] 2 locks held by getty/4831:
[  287.385230][   T29]  #0: ffff88802f19a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  287.395158][   T29]  #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  287.405350][   T29] 1 lock held by syz-executor403/5081:
[  287.410870][   T29]  #0: ffff888023a65190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x7a/0x7a0
[  287.420123][   T29] 
[  287.422454][   T29] =============================================
[  287.422454][   T29] 
[  287.430922][   T29] NMI backtrace for cpu 0
[  287.435267][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[  287.445074][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  287.455152][   T29] Call Trace:
[  287.458435][   T29]  <TASK>
[  287.461364][   T29]  dump_stack_lvl+0x241/0x360
[  287.466056][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.471294][   T29]  ? __pfx__printk+0x10/0x10
[  287.475892][   T29]  ? vprintk_emit+0x631/0x770
[  287.480598][   T29]  ? __pfx_vprintk_emit+0x10/0x10
[  287.485721][   T29]  nmi_cpu_backtrace+0x49c/0x4d0
[  287.490680][   T29]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  287.496240][   T29]  ? _printk+0xd5/0x120
[  287.500423][   T29]  ? __pfx__printk+0x10/0x10
[  287.505027][   T29]  ? __wake_up_klogd+0xcc/0x110
[  287.509892][   T29]  ? __pfx__printk+0x10/0x10
[  287.514498][   T29]  ? __rcu_read_unlock+0xa1/0x110
[  287.519541][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  287.525537][   T29]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  287.531533][   T29]  watchdog+0xfde/0x1020
[  287.536047][   T29]  ? watchdog+0x1ea/0x1020
[  287.540480][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.545188][   T29]  kthread+0x2f0/0x390
[  287.549275][   T29]  ? __pfx_watchdog+0x10/0x10
[  287.553970][   T29]  ? __pfx_kthread+0x10/0x10
[  287.558579][   T29]  ret_from_fork+0x4b/0x80
[  287.563014][   T29]  ? __pfx_kthread+0x10/0x10
[  287.567634][   T29]  ret_from_fork_asm+0x1a/0x30
[  287.572461][   T29]  </TASK>
[  287.575655][   T29] Sending NMI from CPU 0 to CPUs 1:
[  287.580936][    C1] NMI backtrace for cpu 1
[  287.580949][    C1] CPU: 1 PID: 66 Comm: kworker/u8:5 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[  287.580968][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  287.580979][    C1] Workqueue: events_unbound toggle_allocation_gate
[  287.581006][    C1] RIP: 0010:__lock_acquire+0x4c3/0x1fd0
[  287.581027][    C1] Code: 13 00 00 44 89 23 44 89 eb 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 e5 ef 92 be 08 00 00 00 e8 f5 d6 84 00 48 0f a3 1d 0d 56 7d 11 <73> 27 48 69 c3 c8 00 00 00 48 8d 98 00 44 be 92 48 ba 00 00 00 00
[  287.581041][    C1] RSP: 0018:ffffc900015f73d0 EFLAGS: 00000057
[  287.581054][    C1] RAX: 0000000000000001 RBX: 0000000000000038 RCX: ffffffff81728eeb
[  287.581066][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92efe500
[  287.581077][    C1] RBP: 000000000000001e R08: ffffffff92efe507 R09: 1ffffffff25dfca0
[  287.581089][    C1] R10: dffffc0000000000 R11: fffffbfff25dfca1 R12: 0000000000000000
[  287.581101][    C1] R13: 0000000000000038 R14: 000000000000001e R15: ffff8880183c8be8
[  287.581112][    C1] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  287.581126][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.581137][    C1] CR2: 0000561946ede600 CR3: 000000000e134000 CR4: 00000000003506f0
[  287.581152][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  287.581162][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  287.581172][    C1] Call Trace:
[  287.581179][    C1]  <NMI>
[  287.581186][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  287.581206][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  287.581225][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  287.581252][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  287.581274][    C1]  ? nmi_handle+0x14f/0x5a0
[  287.581291][    C1]  ? nmi_handle+0x2a/0x5a0
[  287.581308][    C1]  ? __lock_acquire+0x4c3/0x1fd0
[  287.581325][    C1]  ? default_do_nmi+0x63/0x160
[  287.581345][    C1]  ? exc_nmi+0x123/0x1f0
[  287.581363][    C1]  ? end_repeat_nmi+0xf/0x53
[  287.581387][    C1]  ? __lock_acquire+0x4bb/0x1fd0
[  287.581404][    C1]  ? __lock_acquire+0x4c3/0x1fd0
[  287.581421][    C1]  ? __lock_acquire+0x4c3/0x1fd0
[  287.581458][    C1]  ? __lock_acquire+0x4c3/0x1fd0
[  287.581475][    C1]  </NMI>
[  287.581481][    C1]  <TASK>
[  287.581495][    C1]  lock_acquire+0x1ed/0x550
[  287.581512][    C1]  ? __pte_offset_map_lock+0x1ba/0x300
[  287.581540][    C1]  ? __pfx_switch_ldt+0x10/0x10
[  287.581559][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  287.581578][    C1]  ? rcu_is_watching+0x15/0xb0
[  287.581597][    C1]  ? __pte_offset_map+0x2c4/0x380
[  287.581624][    C1]  ? __pfx___pte_offset_map+0x10/0x10
[  287.581654][    C1]  _raw_spin_lock+0x2e/0x40
[  287.581677][    C1]  ? __pte_offset_map_lock+0x1ba/0x300
[  287.581703][    C1]  __pte_offset_map_lock+0x1ba/0x300
[  287.581738][    C1]  ? __pfx___pte_offset_map_lock+0x10/0x10
[  287.581766][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  287.581790][    C1]  ? walk_to_pmd+0x19b/0x240
[  287.581815][    C1]  ? __kmalloc_node+0x12a/0x4f0
[  287.581839][    C1]  __text_poke+0x2c5/0xd30
[  287.581861][    C1]  ? kmem_cache_alloc_node+0xb5/0x390
[  287.581886][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  287.581908][    C1]  ? __pfx___text_poke+0x10/0x10
[  287.581926][    C1]  ? process_scheduled_works+0x91b/0x17c0
[  287.581949][    C1]  ? __pfx___might_resched+0x10/0x10
[  287.581969][    C1]  ? __mutex_trylock_common+0x183/0x2e0
[  287.581991][    C1]  ? __pfx___might_resched+0x10/0x10
[  287.582016][    C1]  ? __kmalloc_node+0x12a/0x4f0
[  287.582041][    C1]  text_poke_bp_batch+0x265/0xb30
[  287.582068][    C1]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  287.582090][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  287.582109][    C1]  ? arch_jump_label_transform_queue+0x9b/0x100
[  287.582136][    C1]  ? process_scheduled_works+0x91b/0x17c0
[  287.582154][    C1]  text_poke_finish+0x30/0x50
[  287.582174][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  287.582198][    C1]  static_key_disable_cpuslocked+0xce/0x1c0
[  287.582222][    C1]  static_key_disable+0x1a/0x20
[  287.582243][    C1]  toggle_allocation_gate+0x1b8/0x250
[  287.582265][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  287.582288][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  287.582313][    C1]  process_scheduled_works+0xa10/0x17c0
[  287.582345][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  287.582367][    C1]  ? assign_work+0x364/0x3d0
[  287.582386][    C1]  worker_thread+0x86d/0xd70
[  287.582409][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  287.582437][    C1]  ? __kthread_parkme+0x169/0x1d0
[  287.582458][    C1]  ? __pfx_worker_thread+0x10/0x10
[  287.582476][    C1]  kthread+0x2f0/0x390
[  287.582497][    C1]  ? __pfx_worker_thread+0x10/0x10
[  287.582515][    C1]  ? __pfx_kthread+0x10/0x10
[  287.582537][    C1]  ret_from_fork+0x4b/0x80
[  287.582561][    C1]  ? __pfx_kthread+0x10/0x10
[  287.582582][    C1]  ret_from_fork_asm+0x1a/0x30
[  287.582615][    C1]  </TASK>
[  287.582622][    C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.686 msecs
[  287.582932][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  288.072387][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[  288.082227][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  288.092292][   T29] Call Trace:
[  288.095616][   T29]  <TASK>
[  288.098555][   T29]  dump_stack_lvl+0x241/0x360
[  288.103261][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.108474][   T29]  ? __pfx__printk+0x10/0x10
[  288.113080][   T29]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  288.119166][   T29]  ? vscnprintf+0x5d/0x90
[  288.123505][   T29]  panic+0x349/0x860
[  288.127507][   T29]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  288.133676][   T29]  ? __pfx_panic+0x10/0x10
[  288.138194][   T29]  ? tick_nohz_tick_stopped+0x82/0xb0
[  288.143757][   T29]  ? __irq_work_queue_local+0x137/0x410
[  288.149321][   T29]  ? irq_work_queue+0xca/0x150
[  288.154101][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.160104][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.166102][   T29]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.172103][   T29]  ? nmi_trigger_cpumask_backtrace+0x251/0x320
[  288.178275][   T29]  watchdog+0x101d/0x1020
[  288.182611][   T29]  ? watchdog+0x1ea/0x1020
[  288.187045][   T29]  ? __pfx_watchdog+0x10/0x10
[  288.191738][   T29]  kthread+0x2f0/0x390
[  288.195821][   T29]  ? __pfx_watchdog+0x10/0x10
[  288.200507][   T29]  ? __pfx_kthread+0x10/0x10
[  288.205118][   T29]  ret_from_fork+0x4b/0x80
[  288.209565][   T29]  ? __pfx_kthread+0x10/0x10
[  288.214167][   T29]  ret_from_fork_asm+0x1a/0x30
[  288.218958][   T29]  </TASK>
[  288.222241][   T29] Kernel Offset: disabled
[  288.226570][   T29] Rebooting in 86400 seconds..