./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1264477801 <...> Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. execve("./syz-executor1264477801", ["./syz-executor1264477801"], 0x7fff625d79f0 /* 10 vars */) = 0 brk(NULL) = 0x555592ba1000 brk(0x555592ba1d00) = 0x555592ba1d00 arch_prctl(ARCH_SET_FS, 0x555592ba1380) = 0 set_tid_address(0x555592ba1650) = 5828 set_robust_list(0x555592ba1660, 24) = 0 rseq(0x555592ba1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1264477801", 4096) = 28 getrandom("\x4a\xf2\x5d\xf8\xb4\x7e\xef\x09", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555592ba1d00 brk(0x555592bc2d00) = 0x555592bc2d00 brk(0x555592bc3000) = 0x555592bc3000 mprotect(0x7f3effa6d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x555592ba1660, 24 [pid 5828] <... clone resumed>, child_tidptr=0x555592ba1650) = 5829 [pid 5829] <... set_robust_list resumed>) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] setpgid(0, 0) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1000", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] write(1, "executing program\n", 18executing program ) = 18 [pid 5829] mknodat(AT_FDCWD, "./file0", 000) = 0 [pid 5829] pipe2([3, 4], 0) = 0 [pid 5829] write(4, "\x15\x00\x00\x00\x65\xff\xff\x01\x7f\x00\x0e\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5829] dup(4) = 5 [pid 5829] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5829] write(5, "\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176 [pid 5829] write(5, "\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 5829] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5829] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EIO (Input/output error) [pid 5829] openat(AT_FDCWD, "./file0", O_RDONLY) = 6 [pid 5829] read(6, "", 8224) = 0 [pid 5829] exit_group(0) = ? [pid 5829] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached , child_tidptr=0x555592ba1650) = 5831 [pid 5831] set_robust_list(0x555592ba1660, 24) = 0 [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] setpgid(0, 0) = 0 [pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1000", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] write(1, "executing program\n", 18executing program ) = 18 [pid 5831] mknodat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 5831] pipe2([3, 4], 0) = 0 [pid 5831] write(4, "\x15\x00\x00\x00\x65\xff\xff\x01\x7f\x00\x0e\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5831] dup(4) = 5 [pid 5831] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5831] write(5, "\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176 [pid 5831] write(5, "\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 5831] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5831] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = 0 [pid 5831] openat(AT_FDCWD, "./file0", O_RDONLY) = 6 [pid 5831] read(6, [pid 5828] kill(-5831, SIGKILL) = 0 [pid 5828] kill(5831, SIGKILL) = 0 [pid 5828] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5828] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5828] getdents64(3, 0x555592ba26f0 /* 2 entries */, 32768) = 48 [pid 5828] getdents64(3, 0x555592ba26f0 /* 0 entries */, 32768) = 0 [pid 5828] close(3) = 0 syzkaller login: [ 81.909784][ T976] cfg80211: failed to load regulatory.db [ 286.709429][ T30] INFO: task syz-executor126:5831 blocked for more than 143 seconds. [ 286.717889][ T30] Not tainted 6.12.0-next-20241126-syzkaller #0 [ 286.724698][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.733564][ T30] task:syz-executor126 state:D stack:23352 pid:5831 tgid:5831 ppid:5828 flags:0x00004006 [ 286.743973][ T30] Call Trace: [ 286.747285][ T30] [ 286.750281][ T30] __schedule+0x1850/0x4c30 [ 286.754846][ T30] ? __pfx___schedule+0x10/0x10 [ 286.759744][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.764793][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.770062][ T30] ? schedule+0x90/0x320 [ 286.774321][ T30] schedule+0x14b/0x320 [ 286.778519][ T30] bit_wait+0x12/0xd0 [ 286.782516][ T30] __wait_on_bit+0xb0/0x2f0 [ 286.787019][ T30] ? __pfx_bit_wait+0x10/0x10 [ 286.791798][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 286.797277][ T30] ? __pfx_bit_wait+0x10/0x10 [ 286.802052][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 286.808105][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 286.813556][ T30] ? iov_iter_bvec_advance+0x220/0x240 [ 286.819063][ T30] netfs_unbuffered_read_iter_locked+0xd7e/0x1560 [ 286.825499][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 286.831093][ T30] vfs_read+0x991/0xb70 [ 286.835267][ T30] ? __pfx_vfs_read+0x10/0x10 [ 286.839989][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.845222][ T30] ? ptrace_notify+0x279/0x380 [ 286.850064][ T30] ksys_read+0x18f/0x2b0 [ 286.854341][ T30] ? __pfx_ksys_read+0x10/0x10 [ 286.859164][ T30] ? do_syscall_64+0x100/0x230 [ 286.863959][ T30] do_syscall_64+0xf3/0x230 [ 286.868537][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.873226][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.879169][ T30] RIP: 0033:0x7f3eff9f9f79 [ 286.883595][ T30] RSP: 002b:00007ffec41dd138 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.892060][ T30] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f3eff9f9f79 [ 286.900074][ T30] RDX: 0000000000002020 RSI: 000000002001b640 RDI: 0000000000000006 [ 286.908073][ T30] RBP: 00007f3effa4304e R08: 0000000000000006 R09: 0000000000000006 [ 286.916077][ T30] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffec41dd14c [ 286.924081][ T30] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 286.932119][ T30] [ 286.935146][ T30] [ 286.935146][ T30] Showing all locks held in the system: [ 286.942912][ T30] 1 lock held by khungtaskd/30: [ 286.947909][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 286.957842][ T30] 2 locks held by getty/5592: [ 286.962530][ T30] #0: ffff88814d53c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.972334][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 286.982508][ T30] 1 lock held by syz-executor126/5831: [ 286.988038][ T30] #0: ffff88807b3d0148 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 286.999431][ T30] [ 287.001834][ T30] ============================================= [ 287.001834][ T30] [ 287.010426][ T30] NMI backtrace for cpu 0 [ 287.014786][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241126-syzkaller #0 [ 287.024405][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.034447][ T30] Call Trace: [ 287.037717][ T30] [ 287.040633][ T30] dump_stack_lvl+0x241/0x360 [ 287.045303][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.050490][ T30] ? __pfx__printk+0x10/0x10 [ 287.055073][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.060007][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.065453][ T30] ? _printk+0xd5/0x120 [ 287.069604][ T30] ? __pfx__printk+0x10/0x10 [ 287.074181][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.079016][ T30] ? __pfx__printk+0x10/0x10 [ 287.083592][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.088599][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.094559][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.100527][ T30] watchdog+0xffb/0x1040 [ 287.104757][ T30] ? watchdog+0x1ea/0x1040 [ 287.109159][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.113818][ T30] kthread+0x2f0/0x390 [ 287.117873][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.122533][ T30] ? __pfx_kthread+0x10/0x10 [ 287.127124][ T30] ret_from_fork+0x4b/0x80 [ 287.131523][ T30] ? __pfx_kthread+0x10/0x10 [ 287.136097][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.140852][ T30] [ 287.144041][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.149408][ C1] NMI backtrace for cpu 1 [ 287.149421][ C1] CPU: 1 UID: 0 PID: 5193 Comm: klogd Not tainted 6.12.0-next-20241126-syzkaller #0 [ 287.149438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.149447][ C1] RIP: 0010:asm_exc_int3+0x0/0x40 [ 287.149469][ C1] Code: e9 e5 08 00 00 0f 1f 44 00 00 f3 0f 1e fa 0f 01 ca fc 6a ff e8 91 07 00 00 48 89 c4 48 89 e7 e8 26 fb f3 ff e9 c1 08 00 00 90 0f 1e fa 0f 01 ca fc 6a ff f6 44 24 10 03 75 18 ff 74 24 28 ff [ 287.149481][ C1] RSP: 0018:ffffc900034ef698 EFLAGS: 00000046 [ 287.149495][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88805c57da00 [ 287.149507][ C1] RDX: dffffc0000000000 RSI: 0000000000482cc0 RDI: ffff88801ac4f140 [ 287.149517][ C1] RBP: 0000000000000003 R08: ffffffff90199cf7 R09: 1ffffffff203339e [ 287.149528][ C1] R10: dffffc0000000000 R11: fffffbfff203339f R12: 0000000000000200 [ 287.149538][ C1] R13: 0000000000482cc0 R14: 00000000ffffffff R15: ffff88801ac4f140 [ 287.149549][ C1] FS: 00007fc352f4f380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 287.149563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.149573][ C1] CR2: 0000557745b28600 CR3: 000000002cb62000 CR4: 00000000003526f0 [ 287.149587][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.149596][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.149605][ C1] Call Trace: [ 287.149610][ C1] [ 287.149616][ C1] RIP: 0010:__kmalloc_node_track_caller_noprof+0xf9/0x4c0 [ 287.149638][ C1] Code: 2e 31 c0 4c 89 ff 89 de e8 34 b4 0c 00 31 db 4d 85 ff 0f 84 8f 01 00 00 85 c0 0f 85 87 01 00 00 4c 89 24 24 44 89 74 24 14 cc <1f> 44 00 00 48 c7 44 24 18 00 00 00 00 45 89 f0 65 48 8b 05 cf c7 [ 287.149649][ C1] RSP: 0018:ffffc900034ef6c0 EFLAGS: 00000246 [ 287.149658][ C1] ? __alloc_skb+0x1f3/0x440 [ 287.149676][ C1] ? rcu_is_watching+0x15/0xb0 [ 287.149695][ C1] ? __alloc_skb+0x1f3/0x440 [ 287.149711][ C1] ? kmalloc_reserve+0x111/0x2a0 [ 287.149728][ C1] ? __alloc_skb+0x1f3/0x440 [ 287.149750][ C1] ? __lock_acquire+0x1397/0x2100 [ 287.149768][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 287.149789][ C1] ? alloc_skb_with_frags+0xc3/0x820 [ 287.149812][ C1] ? sock_alloc_send_pskb+0x91a/0xa60 [ 287.149839][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 287.149860][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.149878][ C1] ? unix_dgram_sendmsg+0x6d3/0x1f80 [ 287.149903][ C1] ? aa_sk_perm+0x96d/0xab0 [ 287.149921][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.149941][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 287.149962][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.149978][ C1] ? __sock_sendmsg+0x221/0x270 [ 287.149994][ C1] ? __sys_sendto+0x363/0x4c0 [ 287.150013][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 287.150040][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.150057][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.150076][ C1] ? __x64_sys_sendto+0xde/0x100 [ 287.150094][ C1] ? do_syscall_64+0xf3/0x230 [ 287.150109][ C1] ? clear_bhb_loop+0x35/0x90 [ 287.150125][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.150145][ C1] [ 287.150523][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.461029][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241126-syzkaller #0 [ 287.470655][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.480708][ T30] Call Trace: [ 287.483982][ T30] [ 287.486932][ T30] dump_stack_lvl+0x241/0x360 [ 287.491640][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.496851][ T30] ? __pfx__printk+0x10/0x10 [ 287.501445][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.507435][ T30] ? vscnprintf+0x5d/0x90 [ 287.511772][ T30] panic+0x349/0x880 [ 287.515668][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.521818][ T30] ? __pfx_panic+0x10/0x10 [ 287.526228][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.531719][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.537259][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.542633][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.548781][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.554930][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.561082][ T30] watchdog+0x103a/0x1040 [ 287.565409][ T30] ? watchdog+0x1ea/0x1040 [ 287.569820][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.574489][ T30] kthread+0x2f0/0x390 [ 287.578557][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.583224][ T30] ? __pfx_kthread+0x10/0x10 [ 287.587809][ T30] ret_from_fork+0x4b/0x80 [ 287.592218][ T30] ? __pfx_kthread+0x10/0x10 [ 287.596803][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.601572][ T30] [ 287.604901][ T30] Kernel Offset: disabled [ 287.609225][ T30] Rebooting in 86400 seconds..