./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1533856695 <...> Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. execve("./syz-executor1533856695", ["./syz-executor1533856695"], 0x7fffa5786360 /* 10 vars */) = 0 brk(NULL) = 0x555556bcb000 brk(0x555556bcbd00) = 0x555556bcbd00 arch_prctl(ARCH_SET_FS, 0x555556bcb380) = 0 set_tid_address(0x555556bcb650) = 5025 set_robust_list(0x555556bcb660, 24) = 0 rseq(0x555556bcbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1533856695", 4096) = 28 getrandom("\x9e\xec\x11\x6b\xe7\x8e\x2c\x95", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556bcbd00 brk(0x555556becd00) = 0x555556becd00 brk(0x555556bed000) = 0x555556bed000 mprotect(0x7f946a3a2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556bcb650) = 5026 ./strace-static-x86_64: Process 5026 attached [pid 5026] set_robust_list(0x555556bcb660, 24) = 0 [pid 5026] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5026] setsid() = 1 [pid 5026] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5026] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5026] unshare(CLONE_NEWNS) = 0 [pid 5026] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5026] unshare(CLONE_NEWIPC) = 0 [pid 5026] unshare(CLONE_NEWCGROUP) = 0 [pid 5026] unshare(CLONE_NEWUTS) = 0 [pid 5026] unshare(CLONE_SYSVSEM) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "16777216", 8) = 8 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "536870912", 9) = 9 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "8192", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024", 4) = 4 [pid 5026] close(3) = 0 [pid 5026] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5026] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5026] close(3) = 0 [pid 5026] getpid() = 1 [pid 5026] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5026] kill(-2, SIGKILL) = 0 [pid 5026] kill(2, SIGKILL) = 0 [pid 5026] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5026] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5026] getdents64(3, 0x555556bcc6f0 /* 2 entries */, 32768) = 48 [pid 5026] getdents64(3, 0x555556bcc6f0 /* 0 entries */, 32768) = 0 [pid 5026] close(3) = 0 [ 81.818808][ T7] cfg80211: failed to load regulatory.db [ 286.617770][ T28] INFO: task kworker/0:3:4495 blocked for more than 143 seconds. [ 286.625706][ T28] Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0 [ 286.633892][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.643105][ T28] task:kworker/0:3 state:D stack:27024 pid:4495 ppid:2 flags:0x00004000 [ 286.652477][ T28] Workqueue: usb_hub_wq hub_event [ 286.658201][ T28] Call Trace: [ 286.661476][ T28] [ 286.664400][ T28] __schedule+0xee1/0x59f0 [ 286.668912][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.674480][ T28] ? find_held_lock+0x2d/0x110 [ 286.679300][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.685826][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.691261][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.696552][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.701919][ T28] schedule+0xe7/0x1b0 [ 286.706103][ T28] usb_kill_urb.part.0+0x1c6/0x250 [ 286.711319][ T28] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 286.717074][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [ 286.723143][ T28] ? preempt_count_sub+0x150/0x150 [ 286.728341][ T28] usb_kill_urb+0x83/0xa0 [ 286.732719][ T28] usb_start_wait_urb+0x251/0x4c0 [ 286.737791][ T28] ? usb_api_blocking_completion+0xa0/0xa0 [ 286.743673][ T28] ? rcu_is_watching+0x12/0xb0 [ 286.748550][ T28] usb_control_msg+0x327/0x4a0 [ 286.753367][ T28] ? usb_start_wait_urb+0x4c0/0x4c0 [ 286.758754][ T28] hub_port_init+0x131c/0x3850 [ 286.763557][ T28] hub_event+0x2e34/0x5230 [ 286.768064][ T28] ? hub_port_debounce+0x3d0/0x3d0 [ 286.773209][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.778670][ T28] ? spin_bug+0x1d0/0x1d0 [ 286.783038][ T28] process_one_work+0xaa2/0x16f0 [ 286.788173][ T28] ? lock_sync+0x190/0x190 [ 286.792624][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.798051][ T28] ? spin_bug+0x1d0/0x1d0 [ 286.802436][ T28] worker_thread+0x687/0x1110 [ 286.807191][ T28] ? __kthread_parkme+0x152/0x220 [ 286.812426][ T28] ? process_one_work+0x16f0/0x16f0 [ 286.817769][ T28] kthread+0x33a/0x430 [ 286.821968][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.827731][ T28] ret_from_fork+0x2c/0x70 [ 286.832338][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.838154][ T28] ret_from_fork_asm+0x11/0x20 [ 286.843205][ T28] [ 286.846254][ T28] INFO: task syz-executor153:5029 blocked for more than 143 seconds. [ 286.854618][ T28] Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0 [ 286.862971][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.872312][ T28] task:syz-executor153 state:D stack:26000 pid:5029 ppid:5026 flags:0x00004006 [ 286.881683][ T28] Call Trace: [ 286.884986][ T28] [ 286.888193][ T28] __schedule+0xee1/0x59f0 [ 286.892641][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.902438][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.908761][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 286.914372][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.919780][ T28] ? __mutex_lock+0x962/0x1340 [ 286.924591][ T28] schedule+0xe7/0x1b0 [ 286.928816][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.934515][ T28] __mutex_lock+0x967/0x1340 [ 286.939199][ T28] ? usbdev_release+0x87/0x4b0 [ 286.944122][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.950409][ T28] ? __fsnotify_parent+0x4fc/0xa10 [ 286.955605][ T28] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 286.962728][ T28] ? locks_remove_file+0x399/0x5a0 [ 286.968079][ T28] ? free_async+0x520/0x520 [ 286.973097][ T28] ? usbdev_release+0x87/0x4b0 [ 286.978060][ T28] ? task_work_run+0x127/0x240 [ 286.982886][ T28] usbdev_release+0x87/0x4b0 [ 286.987764][ T28] ? free_async+0x520/0x520 [ 286.993099][ T28] __fput+0x3f7/0xac0 [ 286.997327][ T28] task_work_run+0x14d/0x240 [ 287.002056][ T28] ? task_work_cancel+0x30/0x30 [ 287.009222][ T28] ptrace_notify+0x10c/0x130 [ 287.013864][ T28] syscall_exit_to_user_mode_prepare+0x120/0x220 [ 287.020669][ T28] syscall_exit_to_user_mode+0xd/0x50 [ 287.026077][ T28] do_syscall_64+0x44/0xb0 [ 287.030583][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.036699][ T28] RIP: 0033:0x7f946a32e0e0 [ 287.041238][ T28] RSP: 002b:00007ffcdfb36168 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 287.049712][ T28] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f946a32e0e0 [ 287.057732][ T28] RDX: 0000000000000007 RSI: 00007ffcdfb35ca0 RDI: 0000000000000003 [ 287.065896][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.074019][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 287.082485][ T28] R13: 00007ffcdfb36418 R14: 0000000000000001 R15: 00007ffcdfb361b0 [ 287.090936][ T28] [ 287.093987][ T28] [ 287.093987][ T28] Showing all locks held in the system: [ 287.102521][ T28] 1 lock held by rcu_tasks_kthre/13: [ 287.107936][ T28] #0: ffffffff8c9a67f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.120143][ T28] 1 lock held by rcu_tasks_trace/14: [ 287.125728][ T28] #0: ffffffff8c9a64f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.137843][ T28] 1 lock held by khungtaskd/28: [ 287.142717][ T28] #0: ffffffff8c9a7400 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 287.152801][ T28] 5 locks held by kworker/0:3/4495: [ 287.158479][ T28] #0: ffff888015a98538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 287.169965][ T28] #1: ffffc9000324fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 287.181294][ T28] #2: ffff888023108190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c8/0x5230 [ 287.190330][ T28] #3: ffff88802310c508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2a54/0x5230 [ 287.200447][ T28] #4: ffff888022c80a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2a7d/0x5230 [ 287.210267][ T28] 2 locks held by getty/4778: [ 287.215228][ T28] #0: ffff8880286c1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.225081][ T28] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 287.235273][ T28] 1 lock held by syz-executor153/5029: [ 287.240778][ T28] #0: ffff888023108190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x4b0 [ 287.250026][ T28] [ 287.252440][ T28] ============================================= [ 287.252440][ T28] [ 287.261057][ T28] NMI backtrace for cpu 1 [ 287.265488][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0 [ 287.275398][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.285580][ T28] Call Trace: [ 287.288881][ T28] [ 287.291830][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.297157][ T28] nmi_cpu_backtrace+0x277/0x380 [ 287.302168][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.307847][ T28] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 287.314403][ T28] watchdog+0xf29/0x11b0 [ 287.318738][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.324779][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.330971][ T28] kthread+0x33a/0x430 [ 287.335062][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.340708][ T28] ret_from_fork+0x2c/0x70 [ 287.345134][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.350870][ T28] ret_from_fork_asm+0x11/0x20 [ 287.355702][ T28] [ 287.359153][ T28] Sending NMI from CPU 1 to CPUs 0: [ 287.364389][ C0] NMI backtrace for cpu 0 [ 287.364399][ C0] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0 [ 287.364421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.364432][ C0] Workqueue: 0x0 (events_unbound) [ 287.364454][ C0] RIP: 0010:dequeue_entity+0x40/0x1140 [ 287.364481][ C0] Code: 8d a6 80 00 00 00 55 89 d5 4c 89 e2 53 48 c1 ea 03 48 89 fb 48 83 ec 20 80 3c 02 00 0f 85 ef 0d 00 00 49 83 bf 80 00 00 00 00 <0f> 84 77 08 00 00 41 bd 01 00 00 00 48 89 df e8 cc d5 ff ff 44 89 [ 287.364499][ C0] RSP: 0018:ffffc90001587b88 EFLAGS: 00000046 [ 287.364513][ C0] RAX: dffffc0000000000 RBX: ffff8880b983c480 RCX: ffffffff815c57bf [ 287.364531][ C0] RDX: 1ffff1100315d3d8 RSI: ffff888018ae9e40 RDI: ffff8880b983c480 [ 287.364544][ C0] RBP: 0000000000000009 R08: 0000000000000000 R09: fffffbfff1d5743a [ 287.364556][ C0] R10: ffffffff8eaba1d7 R11: 0000000000000000 R12: ffff888018ae9ec0 [ 287.364568][ C0] R13: ffff8880b983c480 R14: dffffc0000000000 R15: ffff888018ae9e40 [ 287.364581][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.364601][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.364614][ C0] CR2: 000055ff87f2b680 CR3: 000000000c776000 CR4: 00000000003506f0 [ 287.364626][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.364637][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.364649][ C0] Call Trace: [ 287.364655][ C0] [ 287.364661][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.364682][ C0] ? dequeue_entity+0x40/0x1140 [ 287.364703][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.364730][ C0] ? nmi_handle+0x145/0x400 [ 287.364753][ C0] ? dequeue_entity+0x40/0x1140 [ 287.364774][ C0] ? default_do_nmi+0x69/0x160 [ 287.364796][ C0] ? exc_nmi+0x171/0x1e0 [ 287.364817][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.364842][ C0] ? trace_sched_util_est_cfs_tp+0x2f/0x120 [ 287.364863][ C0] ? dequeue_entity+0x40/0x1140 [ 287.364883][ C0] ? dequeue_entity+0x40/0x1140 [ 287.364904][ C0] ? dequeue_entity+0x40/0x1140 [ 287.364925][ C0] [ 287.364930][ C0] [ 287.364939][ C0] dequeue_task_fair+0x1c9/0xbf0 [ 287.364964][ C0] __schedule+0x169c/0x59f0 [ 287.364986][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.365015][ C0] ? put_pwq+0x87/0x1b0 [ 287.365036][ C0] ? process_one_work+0x33e/0x16f0 [ 287.365059][ C0] ? io_schedule_timeout+0x150/0x150 [ 287.365083][ C0] ? worker_thread+0x178/0x1110 [ 287.365105][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.365131][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.365154][ C0] ? kthread_data+0x53/0xc0 [ 287.365173][ C0] schedule+0xe7/0x1b0 [ 287.365195][ C0] worker_thread+0x17d/0x1110 [ 287.365224][ C0] ? process_one_work+0x16f0/0x16f0 [ 287.365246][ C0] kthread+0x33a/0x430 [ 287.365264][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.365286][ C0] ret_from_fork+0x2c/0x70 [ 287.365306][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.365327][ C0] ret_from_fork_asm+0x11/0x20 [ 287.365359][ C0] [ 287.365403][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.678511][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0 [ 287.688426][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.698503][ T28] Call Trace: [ 287.701788][ T28] [ 287.704815][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.709425][ T28] panic+0x6a4/0x750 [ 287.713354][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 287.718590][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.723818][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 287.729307][ T28] ? watchdog+0xce1/0x11b0 [ 287.733750][ T28] watchdog+0xcf2/0x11b0 [ 287.738020][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.744128][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.750138][ T28] kthread+0x33a/0x430 [ 287.754224][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.759874][ T28] ret_from_fork+0x2c/0x70 [ 287.764485][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.770132][ T28] ret_from_fork_asm+0x11/0x20 [ 287.775020][ T28] [ 287.778330][ T28] Kernel Offset: disabled [ 287.782737][ T28] Rebooting in 86400 seconds..