./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2928565780 <...> [ 97.106664][ T923] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. execve("./syz-executor2928565780", ["./syz-executor2928565780"], 0x7ffe74432210 /* 10 vars */) = 0 brk(NULL) = 0x555555721000 brk(0x555555721d00) = 0x555555721d00 arch_prctl(ARCH_SET_FS, 0x555555721380) = 0 set_tid_address(0x555555721650) = 5042 set_robust_list(0x555555721660, 24) = 0 rseq(0x555555721ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2928565780", 4096) = 28 getrandom("\x60\x26\xf8\xb0\xf0\x26\xf6\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555721d00 brk(0x555555742d00) = 0x555555742d00 brk(0x555555743000) = 0x555555743000 mprotect(0x7f6fb40f9000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555721650) = 5043 ./strace-static-x86_64: Process 5043 attached [pid 5043] set_robust_list(0x555555721660, 24) = 0 [pid 5043] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5043] setsid() = 1 [pid 5043] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5043] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5043] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5043] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5043] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5043] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5043] unshare(CLONE_NEWNS) = 0 [pid 5043] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5043] unshare(CLONE_NEWIPC) = 0 [pid 5043] unshare(CLONE_NEWCGROUP) = 0 [pid 5043] unshare(CLONE_NEWUTS) = 0 [pid 5043] unshare(CLONE_SYSVSEM) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "16777216", 8) = 8 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "536870912", 9) = 9 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1024", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "8192", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1024", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1024", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5043] close(3) = 0 [pid 5043] getpid() = 1 [pid 5043] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5043] kill(-2, SIGKILL) = 0 [pid 5043] kill(2, SIGKILL) = 0 [pid 5043] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5043] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5043] getdents64(3, 0x5555557226f0 /* 2 entries */, 32768) = 48 [pid 5043] getdents64(3, 0x5555557226f0 /* 0 entries */, 32768) = 0 [pid 5043] close(3) = 0 [ 286.545793][ T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 286.553291][ T29] Not tainted 6.5.0-next-20230831-syzkaller #0 [ 286.560039][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.568762][ T29] task:kworker/0:1 state:D stack:26752 pid:9 ppid:2 flags:0x00004000 [ 286.578056][ T29] Workqueue: usb_hub_wq hub_event [ 286.583215][ T29] Call Trace: [ 286.586533][ T29] [ 286.589479][ T29] __schedule+0xee1/0x59f0 [ 286.593934][ T29] ? asm_sysvec_irq_work+0x1a/0x20 [ 286.599137][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.603965][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.608780][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.614101][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.619567][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 286.624649][ T29] ? spin_bug+0x1d0/0x1d0 [ 286.629032][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.633824][ T29] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 286.639890][ T29] schedule+0xe7/0x1b0 [ 286.644004][ T29] usb_kill_urb.part.0+0x1c6/0x250 [ 286.649170][ T29] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 286.654933][ T29] ? prepare_to_swait_exclusive+0x240/0x240 [ 286.660895][ T29] ? preempt_count_sub+0x150/0x150 [ 286.666084][ T29] usb_kill_urb+0x83/0xa0 [ 286.670435][ T29] usb_start_wait_urb+0x251/0x4c0 [ 286.675526][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 286.681409][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.686245][ T29] usb_control_msg+0x327/0x4a0 [ 286.691042][ T29] ? usb_start_wait_urb+0x4c0/0x4c0 [ 286.696303][ T29] ? hub_resume+0x3e0/0x3e0 [ 286.700865][ T29] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 286.707010][ T29] hub_port_init+0x680/0x3850 [ 286.711736][ T29] hub_event+0x2b64/0x4e00 [ 286.716232][ T29] ? hub_port_debounce+0x3d0/0x3d0 [ 286.721386][ T29] ? check_irq_usage+0xef0/0x1c70 [ 286.726500][ T29] ? lock_sync+0x190/0x190 [ 286.730958][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.736419][ T29] ? __schedule+0xee9/0x59f0 [ 286.741056][ T29] ? spin_bug+0x1d0/0x1d0 [ 286.745415][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.750236][ T29] process_one_work+0x887/0x15d0 [ 286.755242][ T29] ? lock_sync+0x190/0x190 [ 286.759728][ T29] ? init_worker_pool+0x770/0x770 [ 286.764803][ T29] ? assign_work+0x1a0/0x240 [ 286.769455][ T29] worker_thread+0x8bb/0x1290 [ 286.774177][ T29] ? __kthread_parkme+0x152/0x220 [ 286.779261][ T29] ? process_one_work+0x15d0/0x15d0 [ 286.784506][ T29] kthread+0x33a/0x430 [ 286.788629][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.794302][ T29] ret_from_fork+0x45/0x80 [ 286.798802][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.804477][ T29] ret_from_fork_asm+0x11/0x20 [ 286.809317][ T29] [ 286.812454][ T29] INFO: task syz-executor292:5045 blocked for more than 143 seconds. [ 286.820582][ T29] Not tainted 6.5.0-next-20230831-syzkaller #0 [ 286.827313][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.836044][ T29] task:syz-executor292 state:D stack:26936 pid:5045 ppid:5043 flags:0x00004006 [ 286.845271][ T29] Call Trace: [ 286.848600][ T29] [ 286.851564][ T29] __schedule+0xee1/0x59f0 [ 286.856066][ T29] ? rcu_is_watching+0x12/0xb0 [ 286.860867][ T29] ? xfd_validate_state+0x5d/0x180 [ 286.866040][ T29] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 286.872075][ T29] ? finish_task_switch.isra.0+0x216/0xc90 [ 286.877948][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.883279][ T29] ? __mutex_lock+0x962/0x1340 [ 286.888115][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 286.893189][ T29] ? spin_bug+0x1d0/0x1d0 [ 286.897595][ T29] schedule+0xe7/0x1b0 [ 286.901701][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.907228][ T29] __mutex_lock+0x967/0x1340 [ 286.911863][ T29] ? usbdev_release+0x87/0x4b0 [ 286.916702][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.922287][ T29] ? __fsnotify_parent+0x4fc/0xa10 [ 286.927496][ T29] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 286.934304][ T29] ? locks_remove_file+0x399/0x5a0 [ 286.939493][ T29] ? free_async+0x520/0x520 [ 286.944042][ T29] ? usbdev_release+0x87/0x4b0 [ 286.948875][ T29] usbdev_release+0x87/0x4b0 [ 286.953515][ T29] ? free_async+0x520/0x520 [ 286.958096][ T29] __fput+0x3f7/0xa70 [ 286.962154][ T29] __fput_sync+0x47/0x50 [ 286.966475][ T29] __x64_sys_close+0x87/0xf0 [ 286.971110][ T29] do_syscall_64+0x38/0xb0 [ 286.975587][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.981544][ T29] RIP: 0033:0x7f6fb40850e0 [ 286.986000][ T29] RSP: 002b:00007ffd0b56de58 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 286.994423][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6fb40850e0 [ 287.002452][ T29] RDX: 0000000000000007 RSI: 00007ffd0b56d990 RDI: 0000000000000003 [ 287.010466][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.018511][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000f4240 [ 287.026537][ T29] R13: 00007ffd0b56e108 R14: 0000000000000001 R15: 00007ffd0b56dea0 [ 287.034530][ T29] [ 287.037597][ T29] INFO: lockdep is turned off. [ 287.042365][ T29] NMI backtrace for cpu 1 [ 287.046692][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.5.0-next-20230831-syzkaller #0 [ 287.055651][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.065720][ T29] Call Trace: [ 287.069012][ T29] [ 287.071945][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.076635][ T29] nmi_cpu_backtrace+0x277/0x380 [ 287.081603][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.086824][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.092828][ T29] watchdog+0xfac/0x1230 [ 287.097089][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.103095][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.109097][ T29] kthread+0x33a/0x430 [ 287.113186][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.118841][ T29] ret_from_fork+0x45/0x80 [ 287.123280][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.128936][ T29] ret_from_fork_asm+0x11/0x20 [ 287.133736][ T29] [ 287.136842][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.142078][ C0] NMI backtrace for cpu 0 [ 287.142089][ C0] CPU: 0 PID: 60 Comm: kworker/u4:4 Not tainted 6.5.0-next-20230831-syzkaller #0 [ 287.142116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.142131][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.142186][ C0] RIP: 0010:__text_poke+0x227/0xc90 [ 287.142212][ C0] Code: 8d 54 24 78 48 b8 63 00 00 00 00 00 00 80 48 8b 35 36 f5 2c 0b 48 8b 3d 37 f5 2c 0b 4c 21 f0 49 89 c7 e8 ac 10 99 00 48 85 c0 <48> 89 c3 0f 84 11 09 00 00 e8 5b ff 57 00 9c 58 fa 25 00 02 00 00 [ 287.142234][ C0] RSP: 0018:ffffc900015b79a0 EFLAGS: 00000282 [ 287.142252][ C0] RAX: ffff888012c67558 RBX: 0000000000000001 RCX: 0000000000000000 [ 287.142268][ C0] RDX: ffff888019ef0000 RSI: ffffffff81c8f09d RDI: 0000000000000006 [ 287.142283][ C0] RBP: ffffffff81dd2f8c R08: 0000000000000006 R09: 0000000012c67067 [ 287.142299][ C0] R10: 0000000012c67067 R11: 0000000000000000 R12: 0000000000000f8d [ 287.142313][ C0] R13: ffffea0000077480 R14: ffffffffffffffff R15: 8000000000000063 [ 287.142330][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.142354][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.142371][ C0] CR2: 00007efed3d42b90 CR3: 000000000c976000 CR4: 00000000003506f0 [ 287.142386][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.142401][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.142416][ C0] Call Trace: [ 287.142423][ C0] [ 287.142430][ C0] ? show_regs+0x8f/0xa0 [ 287.142459][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.142501][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.142537][ C0] ? nmi_handle+0x1a8/0x570 [ 287.142567][ C0] ? __text_poke+0x227/0xc90 [ 287.142589][ C0] ? default_do_nmi+0x69/0x160 [ 287.142616][ C0] ? exc_nmi+0x171/0x1e0 [ 287.142641][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.142670][ C0] ? kmem_cache_alloc_lru+0x16c/0x630 [ 287.142710][ C0] ? __get_locked_pte+0x7d/0xc0 [ 287.142736][ C0] ? __text_poke+0x227/0xc90 [ 287.142758][ C0] ? __text_poke+0x227/0xc90 [ 287.142782][ C0] ? __text_poke+0x227/0xc90 [ 287.142804][ C0] [ 287.142810][ C0] [ 287.142816][ C0] ? setup_data_read+0x280/0x280 [ 287.142843][ C0] ? apply_relocation+0x830/0x830 [ 287.142867][ C0] ? __text_poke+0xc90/0xc90 [ 287.142890][ C0] ? kmem_cache_alloc_lru+0x16c/0x630 [ 287.142928][ C0] text_poke_bp_batch+0x62e/0x960 [ 287.142953][ C0] ? __kmem_cache_alloc_node+0xca/0x350 [ 287.142999][ C0] ? do_sync_core+0x40/0x40 [ 287.143020][ C0] ? __jump_label_patch+0x1db/0x3f0 [ 287.143058][ C0] ? arch_jump_label_transform_queue+0xc0/0x110 [ 287.143099][ C0] text_poke_finish+0x30/0x40 [ 287.143123][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 287.143160][ C0] jump_label_update+0x32e/0x410 [ 287.143219][ C0] static_key_disable_cpuslocked+0x154/0x1b0 [ 287.143258][ C0] static_key_disable+0x1a/0x20 [ 287.143313][ C0] toggle_allocation_gate+0x13f/0x250 [ 287.143346][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 287.143376][ C0] ? __schedule+0xee9/0x59f0 [ 287.143403][ C0] ? prepare_to_swait_exclusive+0x240/0x240 [ 287.143440][ C0] ? rcu_is_watching+0x12/0xb0 [ 287.143466][ C0] process_one_work+0x887/0x15d0 [ 287.143503][ C0] ? lock_sync+0x190/0x190 [ 287.143537][ C0] ? init_worker_pool+0x770/0x770 [ 287.143572][ C0] ? assign_work+0x1a0/0x240 [ 287.143602][ C0] worker_thread+0x8bb/0x1290 [ 287.143637][ C0] ? __kthread_parkme+0x152/0x220 [ 287.143663][ C0] ? process_one_work+0x15d0/0x15d0 [ 287.143693][ C0] kthread+0x33a/0x430 [ 287.143718][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.143748][ C0] ret_from_fork+0x45/0x80 [ 287.143775][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.143804][ C0] ret_from_fork_asm+0x11/0x20 [ 287.143847][ C0] [ 287.143855][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.777 msecs [ 287.144083][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.533399][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.5.0-next-20230831-syzkaller #0 [ 287.542355][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 287.552429][ T29] Call Trace: [ 287.555732][ T29] [ 287.558681][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.563319][ T29] panic+0x6a6/0x750 [ 287.567241][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 287.572383][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.577636][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.583051][ T29] ? watchdog+0xd63/0x1230 [ 287.587486][ T29] watchdog+0xd74/0x1230 [ 287.591749][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.597759][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.603757][ T29] kthread+0x33a/0x430 [ 287.607848][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.613502][ T29] ret_from_fork+0x45/0x80 [ 287.617942][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.623622][ T29] ret_from_fork_asm+0x11/0x20 [ 287.628508][ T29] [ 287.631616][ T29] Kernel Offset: disabled [ 287.635962][ T29] Rebooting in 86400 seconds..