./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1060152952 <...> forked to background, child pid 3181 no interfaces have a carrier [ 25.737507][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.754331][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.63' (ECDSA) to the list of known hosts. execve("./syz-executor1060152952", ["./syz-executor1060152952"], 0x7ffdfd67d250 /* 10 vars */) = 0 brk(NULL) = 0x555555c5c000 brk(0x555555c5cc40) = 0x555555c5cc40 arch_prctl(ARCH_SET_FS, 0x555555c5c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1060152952", 4096) = 28 brk(0x555555c7dc40) = 0x555555c7dc40 brk(0x555555c7e000) = 0x555555c7e000 mprotect(0x7fb28f908000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3604 attached , child_tidptr=0x555555c5c5d0) = 3604 [pid 3604] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3604] setsid() = 1 [pid 3604] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3604] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3604] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3604] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3604] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3604] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3604] unshare(CLONE_NEWNS) = 0 [pid 3604] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3604] unshare(CLONE_NEWIPC) = 0 [pid 3604] unshare(CLONE_NEWCGROUP) = 0 [pid 3604] unshare(CLONE_NEWUTS) = 0 [pid 3604] unshare(CLONE_SYSVSEM) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "16777216", 8) = 8 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "536870912", 9) = 9 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "1024", 4) = 4 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "8192", 4) = 4 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "1024", 4) = 4 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "1024", 4) = 4 [pid 3604] close(3) = 0 [pid 3604] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3604] close(3) = 0 [pid 3604] getpid() = 1 [pid 3604] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 3604] kill(-2, SIGKILL) = 0 [pid 3604] kill(2, SIGKILL) = 0 [pid 3604] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3604] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3604] getdents64(3, 0x555555c5d620 /* 2 entries */, 32768) = 48 [pid 3604] getdents64(3, 0x555555c5d620 /* 0 entries */, 32768) = 0 [pid 3604] close(3) = 0 [ 76.223000][ T14] cfg80211: failed to load regulatory.db [ 286.139657][ T28] INFO: task syz-executor106:3618 blocked for more than 143 seconds. [ 286.147826][ T28] Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 286.155504][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.164230][ T28] task:syz-executor106 state:D stack:24472 pid: 3618 ppid: 3604 flags:0x00004006 [ 286.173637][ T28] Call Trace: [ 286.176925][ T28] [ 286.180101][ T28] __schedule+0x957/0xe20 [ 286.184597][ T28] ? __sched_text_start+0x8/0x8 [ 286.189630][ T28] schedule+0xcb/0x190 [ 286.193724][ T28] schedule_timeout+0xac/0x300 [ 286.198482][ T28] ? console_conditional_schedule+0x40/0x40 [ 286.204599][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.210809][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.216115][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.221473][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 286.226705][ T28] do_wait_for_common+0x3ea/0x560 [ 286.232011][ T28] ? console_conditional_schedule+0x40/0x40 [ 286.237938][ T28] ? bit_wait_io_timeout+0x110/0x110 [ 286.243434][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 286.248566][ T28] ? __rcu_read_unlock+0x8f/0x100 [ 286.253866][ T28] ? start_flush_work+0x7a2/0x850 [ 286.258991][ T28] wait_for_completion+0x46/0x60 [ 286.264241][ T28] __cancel_work_timer+0x585/0x740 [ 286.269510][ T28] ? cancel_work_sync+0x20/0x20 [ 286.274385][ T28] ? mark_lock+0x98/0x350 [ 286.278707][ T28] ? start_flush_work+0x850/0x850 [ 286.284229][ T28] ? read_lock_is_recursive+0x10/0x10 [ 286.289829][ T28] tls_sk_proto_close+0x120/0x970 [ 286.294930][ T28] ? tls_getsockopt+0x11c0/0x11c0 [ 286.300424][ T28] ? down_write+0x10d/0x170 [ 286.304969][ T28] ? ip_mc_drop_socket+0x251/0x260 [ 286.310356][ T28] inet_release+0x184/0x1e0 [ 286.314881][ T28] sock_close+0xd7/0x260 [ 286.319540][ T28] ? __fput+0x3ac/0x820 [ 286.323769][ T28] ? sock_mmap+0x90/0x90 [ 286.327997][ T28] __fput+0x3b9/0x820 [ 286.332290][ T28] task_work_run+0x146/0x1c0 [ 286.336928][ T28] ptrace_notify+0x29a/0x340 [ 286.341786][ T28] ? do_notify_parent+0xeb0/0xeb0 [ 286.346804][ T28] ? kick_process+0xd6/0x140 [ 286.351659][ T28] ? task_work_add+0x121/0x200 [ 286.356418][ T28] syscall_exit_work+0x8c/0xe0 [ 286.361450][ T28] syscall_exit_to_user_mode_prepare+0x6b/0xc0 [ 286.367603][ T28] syscall_exit_to_user_mode+0xa/0x60 [ 286.373199][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.379149][ T28] RIP: 0033:0x7fb28f856743 [ 286.383732][ T28] RSP: 002b:00007fffba5491d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 286.392199][ T28] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fb28f856743 [ 286.400423][ T28] RDX: fffffffffffffe60 RSI: 00000000200005c0 RDI: 0000000000000005 [ 286.408414][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffffffffffe60 [ 286.416444][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffba5491f0 [ 286.424450][ T28] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 286.432463][ T28] [ 286.435497][ T28] [ 286.435497][ T28] Showing all locks held in the system: [ 286.443249][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.448529][ T28] #0: ffffffff8cb1f030 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.459070][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.464375][ T28] #0: ffffffff8cb1f830 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.475375][ T28] 1 lock held by khungtaskd/28: [ 286.480255][ T28] #0: ffffffff8cb1ee60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 286.489676][ T28] 2 locks held by getty/3278: [ 286.494348][ T28] #0: ffff88814add1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.504175][ T28] #1: ffffc90002d162e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 286.514334][ T28] 3 locks held by kworker/0:4/3610: [ 286.519579][ T28] #0: ffff888011c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x796/0xd10 [ 286.529920][ T28] #1: ffffc900030ffd00 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0xd10 [ 286.542958][ T28] #2: ffff88801ea898d8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0x111/0x150 [ 286.552492][ T28] 1 lock held by syz-executor106/3618: [ 286.557951][ T28] #0: ffff888072fcc410 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x93/0x260 [ 286.568103][ T28] [ 286.570451][ T28] ============================================= [ 286.570451][ T28] [ 286.578839][ T28] NMI backtrace for cpu 1 [ 286.583162][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 286.592768][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.602804][ T28] Call Trace: [ 286.606089][ T28] [ 286.609003][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.613668][ T28] ? io_notif_register+0x5e7/0x5e7 [ 286.618771][ T28] ? panic+0x76e/0x76e [ 286.622911][ T28] ? console_unlock+0x6bd/0x6f0 [ 286.627766][ T28] ? console_trylock_spinning+0x450/0x450 [ 286.633468][ T28] ? nmi_cpu_backtrace+0x248/0x4a0 [ 286.638586][ T28] nmi_cpu_backtrace+0x473/0x4a0 [ 286.643510][ T28] ? vprintk_emit+0x109/0x1e0 [ 286.648183][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 286.654331][ T28] ? _printk+0xcf/0x10f [ 286.658476][ T28] ? panic+0x76e/0x76e [ 286.662535][ T28] ? __wake_up_klogd+0xcd/0x100 [ 286.667380][ T28] ? panic+0x76e/0x76e [ 286.671441][ T28] ? __rcu_read_unlock+0x8f/0x100 [ 286.676456][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.682585][ T28] nmi_trigger_cpumask_backtrace+0x168/0x280 [ 286.688572][ T28] watchdog+0xcd5/0xd20 [ 286.692878][ T28] kthread+0x266/0x300 [ 286.696954][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.701982][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.706578][ T28] ret_from_fork+0x1f/0x30 [ 286.711027][ T28] [ 286.714166][ T28] Sending NMI from CPU 1 to CPUs 0: [ 286.719414][ C0] NMI backtrace for cpu 0 [ 286.719423][ C0] CPU: 0 PID: 41 Comm: kworker/u4:2 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 286.719442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.719451][ C0] Workqueue: events_unbound toggle_allocation_gate [ 286.719521][ C0] RIP: 0010:insn_get_modrm+0x45f/0x760 [ 286.719545][ C0] Code: 85 fd 02 00 00 48 8b 04 24 c7 00 00 00 00 00 bd ea ff ff ff e9 a3 00 00 00 e8 6d 97 1f fd 4c 8b 6c 24 18 eb 05 e8 61 97 1f fd <49> 8d 6f 53 48 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ea 00 00 [ 286.719555][ C0] RSP: 0018:ffffc90000b27780 EFLAGS: 00000293 [ 286.719566][ C0] RAX: ffffffff846885b8 RBX: ffffc90000b279ac RCX: ffff888012a00000 [ 286.719576][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.719584][ C0] RBP: 0000000000000000 R08: ffffffff846885a5 R09: ffffc90000b27960 [ 286.719593][ C0] R10: fffff52000164f37 R11: 1ffff92000164f2c R12: dffffc0000000000 [ 286.719602][ C0] R13: 1ffff92000164f30 R14: ffffc90000b27984 R15: ffffc90000b27960 [ 286.719611][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 286.719622][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.719631][ C0] CR2: 000056470963f058 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 286.719643][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.719650][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.719658][ C0] Call Trace: [ 286.719663][ C0] [ 286.719673][ C0] insn_get_displacement+0x131/0x9a0 [ 286.719688][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.719706][ C0] insn_get_immediate+0x427/0x12e0 [ 286.719723][ C0] insn_decode+0x378/0x510 [ 286.719737][ C0] ? kmem_cache_alloc+0xda/0x310 [ 286.719755][ C0] __jump_label_patch+0xe2/0x430 [ 286.719793][ C0] ? kmem_cache_alloc+0xda/0x310 [ 286.719805][ C0] ? arch_jump_label_transform_queue+0xd0/0xd0 [ 286.719818][ C0] ? __mutex_lock_common+0x45d/0x26c0 [ 286.719836][ C0] ? kmem_cache_alloc+0xda/0x310 [ 286.719847][ C0] ? kmem_cache_alloc+0xe9/0x310 [ 286.719857][ C0] ? kmem_cache_alloc+0xdb/0x310 [ 286.719869][ C0] ? static_key_disable_cpuslocked+0x95/0x1b0 [ 286.719907][ C0] arch_jump_label_transform_queue+0x49/0xd0 [ 286.719921][ C0] __jump_label_update+0x19b/0x3b0 [ 286.719938][ C0] static_key_disable_cpuslocked+0xc8/0x1b0 [ 286.719953][ C0] static_key_disable+0x16/0x20 [ 286.719966][ C0] toggle_allocation_gate+0x3d8/0x470 [ 286.719979][ C0] ? virt_to_slab+0x2c0/0x2c0 [ 286.719993][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 286.720006][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 286.720018][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 286.720036][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.720052][ C0] process_one_work+0x81c/0xd10 [ 286.720074][ C0] ? worker_detach_from_pool+0x260/0x260 [ 286.720089][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 286.720102][ C0] ? kthread_data+0x4d/0xc0 [ 286.720117][ C0] ? wq_worker_running+0x95/0x190 [ 286.720132][ C0] worker_thread+0xb14/0x1330 [ 286.720158][ C0] kthread+0x266/0x300 [ 286.720170][ C0] ? rcu_lock_release+0x20/0x20 [ 286.720182][ C0] ? kthread_blkcg+0xd0/0xd0 [ 286.720195][ C0] ret_from_fork+0x1f/0x30 [ 286.720216][ C0] [ 286.722810][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.049344][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 287.058884][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 287.068930][ T28] Call Trace: [ 287.072208][ T28] [ 287.075131][ T28] dump_stack_lvl+0x1e3/0x2cb [ 287.079809][ T28] ? io_notif_register+0x5e7/0x5e7 [ 287.084911][ T28] ? panic+0x76e/0x76e [ 287.088977][ T28] ? vscnprintf+0x59/0x80 [ 287.093322][ T28] panic+0x312/0x76e [ 287.097240][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 287.102887][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 287.109049][ T28] ? fb_is_primary_device+0xcc/0xcc [ 287.114250][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.120312][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 287.126460][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 287.132628][ T28] watchdog+0xd16/0xd20 [ 287.136895][ T28] kthread+0x266/0x300 [ 287.141097][ T28] ? hungtask_pm_notify+0x50/0x50 [ 287.146137][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.150734][ T28] ret_from_fork+0x1f/0x30 [ 287.155163][ T28] [ 287.158485][ T28] Kernel Offset: disabled [ 287.162830][ T28] Rebooting in 86400 seconds..