./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1426649943

<...>
Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts.
execve("./syz-executor1426649943", ["./syz-executor1426649943"], 0x7ffc2ca578f0 /* 10 vars */) = 0
brk(NULL)                               = 0x555557188000
brk(0x555557188d00)                     = 0x555557188d00
arch_prctl(ARCH_SET_FS, 0x555557188380) = 0
set_tid_address(0x555557188650)         = 5066
set_robust_list(0x555557188660, 24)     = 0
rseq(0x555557188ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1426649943", 4096) = 28
getrandom("\x10\xa4\x33\x7d\x44\xec\x66\x3e", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555557188d00
brk(0x5555571a9d00)                     = 0x5555571a9d00
brk(0x5555571aa000)                     = 0x5555571aa000
mprotect(0x7f011c995000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached
 <unfinished ...>
[pid  5067] set_robust_list(0x555557188660, 24 <unfinished ...>
[pid  5066] <... clone resumed>, child_tidptr=0x555557188650) = 5067
[pid  5067] <... set_robust_list resumed>) = 0
[pid  5067] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5067] setsid()                    = 1
[pid  5067] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5067] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5067] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5067] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5067] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5067] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5067] unshare(CLONE_NEWNS)        = 0
[pid  5067] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5067] unshare(CLONE_NEWIPC)       = 0
[pid  5067] unshare(CLONE_NEWCGROUP)    = 0
[pid  5067] unshare(CLONE_NEWUTS)       = 0
[pid  5067] unshare(CLONE_SYSVSEM)      = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "16777216", 8)     = 8
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "536870912", 9)    = 9
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "1024", 4)         = 4
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "8192", 4)         = 4
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "1024", 4)         = 4
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "1024", 4)         = 4
[pid  5067] close(3)                    = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5067] close(3)                    = 0
[pid  5067] getpid()                    = 1
[pid  5067] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5067] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5067] unshare(CLONE_NEWNET)       = 0
[pid  5067] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5067] write(3, "0 65535", 7)      = 7
[pid  5067] close(3)                    = 0
[pid  5067] mkdir("/dev/binderfs", 0777) = 0
[pid  5067] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5067] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5070 attached
, child_tidptr=0x555557188650) = 2
[pid  5070] set_robust_list(0x555557188660, 24) = 0
[pid  5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5070] setpgid(0, 0)               = 0
[pid  5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5070] write(3, "1000", 4)         = 4
[pid  5070] close(3)                    = 0
[pid  5070] openat(AT_FDCWD, "/dev/bus/usb/009/001", O_WRONLY|O_TRUNC|O_NONBLOCK|O_NOFOLLOW) = 3
[pid  5070] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0
[pid  5070] openat(AT_FDCWD, "/sys/devices/platform/vhci_hcd.0/attach", O_WRONLY|O_CLOEXEC) = 6
[pid  5070] write(6, "0 4 0 2", 7)      = 7
[pid  5070] close(6)                    = 0
[   56.199116][ T5070] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   56.205695][ T5070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   56.215495][ T5070] vhci_hcd vhci_hcd.0: Device attached
[   56.488287][    T9] vhci_hcd: vhci_device speed not set
[   56.558048][    T9] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[pid  5070] close(3 <unfinished ...>
[pid  5067] kill(-2, SIGKILL)           = 0
[pid  5067] kill(2, SIGKILL)            = 0
[pid  5067] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5067] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
[pid  5067] getdents64(3, 0x5555571896f0 /* 2 entries */, 32768) = 48
[pid  5067] getdents64(3, 0x5555571896f0 /* 0 entries */, 32768) = 0
[pid  5067] close(3)                    = 0
[   76.029540][   T23] cfg80211: failed to load regulatory.db
[  285.947911][   T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds.
[  285.955516][   T29]       Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0
[  285.962742][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  285.971452][   T29] task:kworker/0:1     state:D stack:25952 pid:9     tgid:9     ppid:2      flags:0x00004000
[  285.981667][   T29] Workqueue: usb_hub_wq hub_event
[  285.986747][   T29] Call Trace:
[  285.990104][   T29]  <TASK>
[  285.993047][   T29]  __schedule+0xee2/0x59a0
[  285.997454][   T29]  ? io_schedule_timeout+0x150/0x150
[  286.002858][   T29]  ? schedule+0x1fa/0x270
[  286.007199][   T29]  ? reacquire_held_locks+0x4b0/0x4b0
[  286.012624][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.017880][   T29]  ? lockdep_hardirqs_on+0x7d/0x100
[  286.023071][   T29]  schedule+0xe7/0x270
[  286.027119][   T29]  usb_kill_urb.part.0+0x1c6/0x250
[  286.032371][   T29]  ? usb_anchor_suspend_wakeups+0x40/0x40
[  286.038129][   T29]  ? cpuusage_read+0x10/0x10
[  286.042707][   T29]  ? preempt_count_sub+0x150/0x150
[  286.047863][   T29]  usb_kill_urb+0x83/0xa0
[  286.052212][   T29]  usb_start_wait_urb+0x251/0x4c0
[  286.057244][   T29]  ? usb_api_blocking_completion+0xa0/0xa0
[  286.063114][   T29]  ? rcu_is_watching+0x12/0xb0
[  286.067930][   T29]  usb_control_msg+0x327/0x4a0
[  286.072683][   T29]  ? usb_start_wait_urb+0x4c0/0x4c0
[  286.077910][   T29]  ? hub_resume+0x3e0/0x3e0
[  286.082430][   T29]  get_bMaxPacketSize0.constprop.0+0xa5/0x1c0
[  286.088553][   T29]  hub_port_init+0x680/0x3820
[  286.093260][   T29]  hub_event+0x2b61/0x4e10
[  286.097686][   T29]  ? hub_port_debounce+0x3d0/0x3d0
[  286.102843][   T29]  ? lock_release+0x5b1/0x680
[  286.107541][   T29]  ? lock_sync+0x190/0x190
[  286.112018][   T29]  ? reacquire_held_locks+0x4b0/0x4b0
[  286.117411][   T29]  process_one_work+0x884/0x15c0
[  286.122390][   T29]  ? lock_sync+0x190/0x190
[  286.126822][   T29]  ? init_worker_pool+0x770/0x770
[  286.131902][   T29]  ? assign_work+0x1a0/0x240
[  286.136508][   T29]  worker_thread+0x8b9/0x1290
[  286.141309][   T29]  ? __kthread_parkme+0x14b/0x220
[  286.146360][   T29]  ? process_one_work+0x15c0/0x15c0
[  286.151596][   T29]  kthread+0x33c/0x440
[  286.155677][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.160902][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.166542][   T29]  ret_from_fork+0x45/0x80
[  286.170997][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.176642][   T29]  ret_from_fork_asm+0x11/0x20
[  286.181450][   T29]  </TASK>
[  286.184529][   T29] INFO: task syz-executor142:5070 blocked for more than 143 seconds.
[  286.192718][   T29]       Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0
[  286.199958][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.208785][   T29] task:syz-executor142 state:D stack:24208 pid:5070  tgid:5070  ppid:5067   flags:0x00004006
[  286.218990][   T29] Call Trace:
[  286.222250][   T29]  <TASK>
[  286.225162][   T29]  __schedule+0xee2/0x59a0
[  286.229640][   T29]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  286.235647][   T29]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  286.241683][   T29]  ? __lock_acquire+0x182f/0x5de0
[  286.246730][   T29]  ? io_schedule_timeout+0x150/0x150
[  286.252064][   T29]  ? schedule+0x1fa/0x270
[  286.256404][   T29]  ? reacquire_held_locks+0x4b0/0x4b0
[  286.261802][   T29]  ? __mutex_lock+0x964/0x1340
[  286.266574][   T29]  schedule+0xe7/0x270
[  286.270698][   T29]  schedule_preempt_disabled+0x13/0x20
[  286.276171][   T29]  __mutex_lock+0x969/0x1340
[  286.282794][   T29]  ? usbdev_release+0x87/0x4b0
[  286.287571][   T29]  ? spin_bug+0x1d0/0x1d0
[  286.291957][   T29]  ? mutex_lock_io_nested+0x11a0/0x11a0
[  286.297515][   T29]  ? __fsnotify_parent+0x4fc/0xa10
[  286.302660][   T29]  ? locks_remove_file+0x399/0x5a0
[  286.307864][   T29]  ? free_async+0x530/0x530
[  286.312355][   T29]  ? usbdev_release+0x87/0x4b0
[  286.317097][   T29]  usbdev_release+0x87/0x4b0
[  286.321724][   T29]  ? free_async+0x530/0x530
[  286.326259][   T29]  __fput+0x270/0xbb0
[  286.330344][   T29]  __fput_sync+0x47/0x50
[  286.334604][   T29]  __x64_sys_close+0x87/0xf0
[  286.339251][   T29]  do_syscall_64+0x3f/0x110
[  286.343790][   T29]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  286.349731][   T29] RIP: 0033:0x7f011c9210e0
[  286.354156][   T29] RSP: 002b:00007ffff3f6d118 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  286.362609][   T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f011c9210e0
[  286.370675][   T29] RDX: 0000000000000007 RSI: 00007ffff3f6cc50 RDI: 0000000000000003
[  286.378700][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  286.386674][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240
[  286.394821][   T29] R13: 00007ffff3f6d3c8 R14: 0000000000000001 R15: 00007ffff3f6d160
[  286.402857][   T29]  </TASK>
[  286.405886][   T29] 
[  286.405886][   T29] Showing all locks held in the system:
[  286.413669][   T29] 5 locks held by kworker/0:1/9:
[  286.418731][   T29]  #0: ffff8881406cc138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x787/0x15c0
[  286.429573][   T29]  #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7e9/0x15c0
[  286.440869][   T29]  #2: ffff8880204cc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10
[  286.449798][   T29]  #3: ffff888142f40510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10
[  286.459766][   T29]  #4: ffff88801f8b1168 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10
[  286.469473][   T29] 1 lock held by khungtaskd/29:
[  286.474328][   T29]  #0: ffffffff8cfacfe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340
[  286.484222][   T29] 2 locks held by getty/4822:
[  286.488986][   T29]  #0: ffff888025f230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  286.498769][   T29]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490
[  286.508953][   T29] 1 lock held by syz-executor142/5070:
[  286.514432][   T29]  #0: ffff8880204cc190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x4b0
[  286.523640][   T29] 
[  286.525962][   T29] =============================================
[  286.525962][   T29] 
[  286.534420][   T29] NMI backtrace for cpu 0
[  286.538747][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0
[  286.548186][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[  286.558222][   T29] Call Trace:
[  286.561483][   T29]  <TASK>
[  286.564394][   T29]  dump_stack_lvl+0xd9/0x1b0
[  286.568971][   T29]  nmi_cpu_backtrace+0x277/0x380
[  286.573893][   T29]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  286.579080][   T29]  nmi_trigger_cpumask_backtrace+0x299/0x300
[  286.585047][   T29]  watchdog+0xf87/0x1210
[  286.589275][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  286.595234][   T29]  ? lockdep_hardirqs_on+0x7d/0x100
[  286.600413][   T29]  ? __kthread_parkme+0x14b/0x220
[  286.605418][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  286.611377][   T29]  kthread+0x33c/0x440
[  286.615435][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.620622][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.626249][   T29]  ret_from_fork+0x45/0x80
[  286.630664][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.636297][   T29]  ret_from_fork_asm+0x11/0x20
[  286.641063][   T29]  </TASK>
[  286.644236][   T29] Sending NMI from CPU 0 to CPUs 1:
[  286.649503][    C1] NMI backtrace for cpu 1
[  286.649511][    C1] CPU: 1 PID: 4510 Comm: klogd Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0
[  286.649524][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[  286.649530][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60
[  286.649549][    C1] Code: e6 a9 dc 02 66 0f 1f 44 00 00 f3 0f 1e fa 48 8b be b0 01 00 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <f3> 0f 1e fa 65 48 8b 14 25 c0 bc 03 00 65 8b 05 d4 17 7b 7e a9 00
[  286.649560][    C1] RSP: 0018:ffffc9000314fa58 EFLAGS: 00000246
[  286.649570][    C1] RAX: 1ffffffff194ea50 RBX: 0000000000000000 RCX: ffffffff841d9ef5
[  286.649578][    C1] RDX: ffff888075dcbb80 RSI: ffffffff841d9eb4 RDI: 0000000000000005
[  286.649585][    C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  286.649592][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  286.649599][    C1] R13: ffff888025bbb000 R14: ffff888067d678c0 R15: ffff888025bbb000
[  286.649610][    C1] FS:  00007ff2829b1380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  286.649622][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  286.649629][    C1] CR2: 000055a747819680 CR3: 0000000026cec000 CR4: 0000000000350ef0
[  286.649637][    C1] Call Trace:
[  286.649641][    C1]  <NMI>
[  286.649645][    C1]  ? show_regs+0x8f/0xa0
[  286.649660][    C1]  ? nmi_cpu_backtrace+0x1d4/0x380
[  286.649677][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x10
[  286.649694][    C1]  ? nmi_handle+0x1a6/0x570
[  286.649707][    C1]  ? x86_pmu_event_mapped+0x1c0/0x1c0
[  286.649726][    C1]  ? kcov_close+0x20/0x20
[  286.649738][    C1]  ? default_do_nmi+0x69/0x160
[  286.649769][    C1]  ? exc_nmi+0x186/0x200
[  286.649792][    C1]  ? end_repeat_nmi+0xf/0x2a
[  286.649808][    C1]  ? security_sock_rcv_skb+0x75/0xb0
[  286.649828][    C1]  ? security_sock_rcv_skb+0x34/0xb0
[  286.649846][    C1]  ? kcov_close+0x20/0x20
[  286.649858][    C1]  ? kcov_close+0x20/0x20
[  286.649870][    C1]  ? kcov_close+0x20/0x20
[  286.649882][    C1]  </NMI>
[  286.649885][    C1]  <TASK>
[  286.649888][    C1]  security_sock_rcv_skb+0x8e/0xb0
[  286.649908][    C1]  sk_filter_trim_cap+0xd2/0xa40
[  286.649922][    C1]  ? __virt_addr_valid+0x5e/0x2d0
[  286.649937][    C1]  ? __phys_addr_symbol+0x30/0x70
[  286.649951][    C1]  ? __check_object_size+0x323/0x730
[  286.649970][    C1]  ? bpf_msg_push_data+0x2050/0x2050
[  286.649983][    C1]  ? skb_copy_datagram_from_iter+0x47f/0x6b0
[  286.650003][    C1]  unix_dgram_sendmsg+0xb32/0x1ca0
[  286.650021][    C1]  ? aa_sk_perm+0x2f8/0xb10
[  286.650035][    C1]  ? unix_stream_connect+0x1830/0x1830
[  286.650050][    C1]  ? aa_af_perm+0x250/0x250
[  286.650064][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  286.650078][    C1]  ? unix_stream_connect+0x1830/0x1830
[  286.650093][    C1]  __sock_sendmsg+0xd5/0x180
[  286.650105][    C1]  __sys_sendto+0x255/0x340
[  286.650118][    C1]  ? __ia32_sys_getpeername+0xb0/0xb0
[  286.650131][    C1]  ? reacquire_held_locks+0x4b0/0x4b0
[  286.650149][    C1]  ? preempt_count_sub+0x150/0x150
[  286.650168][    C1]  ? folio_memcg_unlock+0x280/0x280
[  286.650185][    C1]  __x64_sys_sendto+0xe0/0x1b0
[  286.650198][    C1]  ? syscall_enter_from_user_mode+0x26/0x80
[  286.650211][    C1]  do_syscall_64+0x3f/0x110
[  286.650228][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[  286.650241][    C1] RIP: 0033:0x7ff282b139b5
[  286.650250][    C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83
[  286.650261][    C1] RSP: 002b:00007ffd28ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  286.650271][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff282b139b5
[  286.650279][    C1] RDX: 000000000000003d RSI: 000055d588f93bb0 RDI: 0000000000000003
[  286.650286][    C1] RBP: 000055d588f8f910 R08: 0000000000000000 R09: 0000000000000000
[  286.650293][    C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
[  286.650299][    C1] R13: 00007ff282ca1212 R14: 00007ffd28ccc128 R15: 0000000000000000
[  286.650311][    C1]  </TASK>
[  286.664499][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  286.664515][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.0-syzkaller-16039-gac347a0655db #0
[  286.664538][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[  286.664548][   T29] Call Trace:
[  286.664554][   T29]  <TASK>
[  286.664561][   T29]  dump_stack_lvl+0xd9/0x1b0
[  286.664596][   T29]  panic+0x6dc/0x790
[  286.664623][   T29]  ? panic_smp_self_stop+0xa0/0xa0
[  286.664651][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  286.664685][   T29]  ? lapic_can_unplug_cpu+0xa0/0xa0
[  286.664712][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  286.664740][   T29]  ? watchdog+0xd3e/0x1210
[  286.664760][   T29]  ? watchdog+0xd31/0x1210
[  286.664786][   T29]  watchdog+0xd4f/0x1210
[  286.664815][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  286.664836][   T29]  ? lockdep_hardirqs_on+0x7d/0x100
[  286.664858][   T29]  ? __kthread_parkme+0x14b/0x220
[  286.664878][   T29]  ? proc_dohung_task_timeout_secs+0x90/0x90
[  286.664903][   T29]  kthread+0x33c/0x440
[  286.664919][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  286.664939][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.664962][   T29]  ret_from_fork+0x45/0x80
[  286.664988][   T29]  ? kthread_complete_and_exit+0x40/0x40
[  286.665008][   T29]  ret_from_fork_asm+0x11/0x20
[  286.665043][   T29]  </TASK>
[  286.665328][   T29] Kernel Offset: disabled