./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2883511952 <...> [ 87.009671][ T55] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. execve("./syz-executor2883511952", ["./syz-executor2883511952"], 0x7ffca103c0b0 /* 10 vars */) = 0 brk(NULL) = 0x555555a29000 brk(0x555555a29d00) = 0x555555a29d00 arch_prctl(ARCH_SET_FS, 0x555555a29380) = 0 set_tid_address(0x555555a29650) = 5069 set_robust_list(0x555555a29660, 24) = 0 rseq(0x555555a29ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2883511952", 4096) = 28 getrandom("\xe8\x13\x3a\x68\x89\xae\x6a\xee", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555a29d00 brk(0x555555a4ad00) = 0x555555a4ad00 brk(0x555555a4b000) = 0x555555a4b000 mprotect(0x7f83f9565000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a29650) = 5070 ./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x555555a29660, 24) = 0 [pid 5070] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setsid() = 1 [pid 5070] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5070] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5070] unshare(CLONE_NEWNS) = 0 [pid 5070] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5070] unshare(CLONE_NEWIPC) = 0 [pid 5070] unshare(CLONE_NEWCGROUP) = 0 [pid 5070] unshare(CLONE_NEWUTS) = 0 [pid 5070] unshare(CLONE_SYSVSEM) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "16777216", 8) = 8 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "536870912", 9) = 9 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1024", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "8192", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1024", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1024", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5070] close(3) = 0 [pid 5070] getpid() = 1 [pid 5070] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5070] kill(-3, SIGKILL) = 0 [pid 5070] kill(3, SIGKILL) = 0 [pid 5070] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x555555a2a6f0 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(3, 0x555555a2a6f0 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [ 123.478672][ T23] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2646 jiffies s: 557 root: 0x1/. [ 123.490579][ T23] rcu: blocking rcu_node structures (internal RCU debug): [ 123.497700][ T23] Sending NMI from CPU 1 to CPUs 0: [ 123.502942][ C0] NMI backtrace for cpu 0 [ 123.502952][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.7.0-rc1-syzkaller-00273-g69d5ee8c1291 #0 [ 123.502974][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 123.502985][ C0] RIP: 0010:kasan_check_range+0x105/0x190 [ 123.503028][ C0] Code: 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 71 ed ff ff 83 f0 01 5b 5d 41 5c c3 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 <48> 39 d0 74 41 80 38 00 74 f2 eb b6 41 bc 08 00 00 00 45 29 dc 49 [ 123.503047][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000086 [ 123.503063][ C0] RAX: fffffbfff23e35d1 RBX: fffffbfff23e35d1 RCX: ffffffff8167301e [ 123.503077][ C0] RDX: fffffbfff23e35d1 RSI: 0000000000000008 RDI: ffffffff91f1ae80 [ 123.503091][ C0] RBP: fffffbfff23e35d0 R08: 0000000000000000 R09: fffffbfff23e35d0 [ 123.503104][ C0] R10: ffffffff91f1ae87 R11: 0000000000000001 R12: 0000000000000002 [ 123.503116][ C0] R13: 0000000000000000 R14: ffffffff8cc963e8 R15: 00000000000000c0 [ 123.503129][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 123.503150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.503164][ C0] CR2: 00007f83f953a3b0 CR3: 000000007a7c0000 CR4: 00000000003506f0 [ 123.503177][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.503188][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.503201][ C0] Call Trace: [ 123.503207][ C0] [ 123.503215][ C0] ? show_regs+0x8f/0xa0 [ 123.503239][ C0] ? nmi_cpu_backtrace+0x1d4/0x390 [ 123.503268][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 123.503298][ C0] ? nmi_handle+0x1a6/0x570 [ 123.503323][ C0] ? kasan_check_range+0x105/0x190 [ 123.503342][ C0] ? default_do_nmi+0x6a/0x160 [ 123.503369][ C0] ? exc_nmi+0x186/0x200 [ 123.503394][ C0] ? end_repeat_nmi+0xf/0x2a [ 123.503417][ C0] ? hlock_class+0x4e/0x130 [ 123.503444][ C0] ? kasan_check_range+0x105/0x190 [ 123.503463][ C0] ? kasan_check_range+0x105/0x190 [ 123.503483][ C0] ? kasan_check_range+0x105/0x190 [ 123.503502][ C0] [ 123.503507][ C0] [ 123.503514][ C0] hlock_class+0x4e/0x130 [ 123.503539][ C0] __lock_acquire+0xc4d/0x3b10 [ 123.503579][ C0] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 123.503614][ C0] lock_acquire+0x1ae/0x520 [ 123.503643][ C0] ? debug_object_activate+0x134/0x490 [ 123.503672][ C0] ? lock_sync+0x190/0x190 [ 123.503701][ C0] ? lock_acquire+0x1ae/0x520 [ 123.503729][ C0] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 123.503762][ C0] ? debug_object_activate+0x134/0x490 [ 123.503789][ C0] debug_object_activate+0x144/0x490 [ 123.503816][ C0] ? debug_object_activate+0x134/0x490 [ 123.503842][ C0] ? lock_acquire+0x1ae/0x520 [ 123.503871][ C0] ? debug_object_free+0x360/0x360 [ 123.503900][ C0] ? do_raw_spin_lock+0x12e/0x2b0 [ 123.503920][ C0] ? spin_bug+0x1d0/0x1d0 [ 123.503940][ C0] ? enqueue_hrtimer+0x23/0x310 [ 123.503969][ C0] enqueue_hrtimer+0x23/0x310 [ 123.503999][ C0] __hrtimer_run_queues+0xa12/0xc20 [ 123.504033][ C0] ? enqueue_hrtimer+0x310/0x310 [ 123.504062][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610 [ 123.504090][ C0] hrtimer_interrupt+0x31b/0x800 [ 123.504116][ C0] __sysvec_apic_timer_interrupt+0x105/0x400 [ 123.504143][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 123.504173][ C0] [ 123.504178][ C0] [ 123.504187][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.504209][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 123.504230][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 77 25 ba 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 123.504248][ C0] RSP: 0018:ffffffff8cc07d68 EFLAGS: 00000246 [ 123.504276][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a7ff817 [ 123.504289][ C0] RDX: 0000000000000001 RSI: ffff888018251800 RDI: ffff888018251864 [ 123.504302][ C0] RBP: ffff888018251864 R08: 0000000000000001 R09: ffffed1017306dbd [ 123.504315][ C0] R10: ffff8880b9836deb R11: 0000000000000000 R12: ffff88801aaff800 [ 123.504328][ C0] R13: ffffffff8db1c2c0 R14: 0000000000000000 R15: 0000000000000000 [ 123.504345][ C0] ? ct_kernel_exit+0x137/0x190 [ 123.504377][ C0] acpi_idle_enter+0xc5/0x160 [ 123.504399][ C0] cpuidle_enter_state+0x83/0x500 [ 123.504419][ C0] ? mark_tsc_async_resets+0x50/0x50 [ 123.504443][ C0] cpuidle_enter+0x4e/0xa0 [ 123.504468][ C0] do_idle+0x319/0x400 [ 123.504489][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 123.504514][ C0] cpu_startup_entry+0x50/0x60 [ 123.504534][ C0] rest_init+0x16f/0x2b0 [ 123.504553][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 123.504586][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 123.504609][ C0] arch_call_rest_init+0x13/0x30 [ 123.504635][ C0] start_kernel+0x39f/0x480 [ 123.504660][ C0] x86_64_start_reservations+0x18/0x30 [ 123.504691][ C0] x86_64_start_kernel+0xb2/0xc0 [ 123.504721][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 123.504756][ C0] [ 123.504763][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.821 msecs