./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor112460081 <...> Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. execve("./syz-executor112460081", ["./syz-executor112460081"], 0x7ffd96be9ce0 /* 10 vars */) = 0 brk(NULL) = 0x555555cb7000 brk(0x555555cb7c40) = 0x555555cb7c40 arch_prctl(ARCH_SET_FS, 0x555555cb7300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor112460081", 4096) = 27 brk(0x555555cd8c40) = 0x555555cd8c40 brk(0x555555cd9000) = 0x555555cd9000 mprotect(0x7f5be8de6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3600 attached , child_tidptr=0x555555cb75d0) = 3600 [pid 3600] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3600] setsid() = 1 [pid 3600] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3600] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3600] unshare(CLONE_NEWNS) = 0 [pid 3600] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3600] unshare(CLONE_NEWIPC) = 0 [pid 3600] unshare(CLONE_NEWCGROUP) = 0 [pid 3600] unshare(CLONE_NEWUTS) = 0 [pid 3600] unshare(CLONE_SYSVSEM) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "16777216", 8) = 8 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "536870912", 9) = 9 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "8192", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024", 4) = 4 [pid 3600] close(3) = 0 [pid 3600] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3600] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3600] close(3) = 0 [pid 3600] getpid() = 1 [pid 3600] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 3600] kill(-2, SIGKILL) = 0 [pid 3600] kill(2, SIGKILL) = 0 [pid 3600] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3600] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3600] getdents64(3, 0x555555cb8620 /* 2 entries */, 32768) = 48 [pid 3600] getdents64(3, 0x555555cb8620 /* 0 entries */, 32768) = 0 [pid 3600] close(3) = 0 [ 76.200415][ T14] cfg80211: failed to load regulatory.db [ 286.112844][ T28] INFO: task syz-executor112:3616 blocked for more than 143 seconds. [ 286.121129][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 286.128672][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.138133][ T28] task:syz-executor112 state:D stack:26640 pid: 3616 ppid: 3600 flags:0x00004006 [ 286.147449][ T28] Call Trace: [ 286.150744][ T28] [ 286.153969][ T28] __schedule+0xa09/0x4f10 [ 286.158545][ T28] ? io_schedule_timeout+0x140/0x140 [ 286.164134][ T28] schedule+0xd2/0x1f0 [ 286.168212][ T28] schedule_timeout+0x1db/0x2a0 [ 286.173359][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 286.178624][ T28] ? __wait_for_common+0x36f/0x530 [ 286.183934][ T28] ? mark_held_locks+0x9f/0xe0 [ 286.188736][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 286.194501][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.199743][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.205040][ T28] __wait_for_common+0x378/0x530 [ 286.210001][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 286.215318][ T28] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 286.221677][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.226926][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.232146][ T28] __flush_work+0x56c/0xb10 [ 286.236755][ T28] ? queue_delayed_work_on+0x120/0x120 [ 286.242238][ T28] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 286.248093][ T28] ? mark_held_locks+0x9f/0xe0 [ 286.252993][ T28] ? __cancel_work_timer+0x408/0x570 [ 286.258301][ T28] __cancel_work_timer+0x3f9/0x570 [ 286.263481][ T28] ? cancel_delayed_work+0x20/0x20 [ 286.268618][ T28] ? lock_release+0x780/0x780 [ 286.273399][ T28] tls_sk_proto_close+0x4a7/0xaf0 [ 286.278531][ T28] ? wait_on_pending_writer+0x430/0x430 [ 286.284118][ T28] ? ip_mc_drop_socket+0x16/0x260 [ 286.289200][ T28] inet_release+0x12e/0x270 [ 286.293794][ T28] inet6_release+0x4c/0x70 [ 286.298309][ T28] __sock_release+0xcd/0x280 [ 286.303311][ T28] sock_close+0x18/0x20 [ 286.307496][ T28] __fput+0x277/0x9d0 [ 286.311558][ T28] ? __sock_release+0x280/0x280 [ 286.317645][ T28] task_work_run+0xdd/0x1a0 [ 286.322164][ T28] ptrace_notify+0x114/0x140 [ 286.327380][ T28] syscall_exit_to_user_mode_prepare+0x129/0x280 [ 286.334621][ T28] syscall_exit_to_user_mode+0x9/0x50 [ 286.340026][ T28] do_syscall_64+0x42/0xb0 [ 286.344686][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.350592][ T28] RIP: 0033:0x7f5be8d34743 [ 286.356007][ T28] RSP: 002b:00007ffdc1ae1e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 286.364647][ T28] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f5be8d34743 [ 286.373485][ T28] RDX: fffffffffffffe60 RSI: 00000000200005c0 RDI: 0000000000000005 [ 286.381457][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffffffffffe60 [ 286.389696][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc1ae1e60 [ 286.398621][ T28] R13: 00000000000f4240 R14: 0000000000000000 R15: 0000000000000000 [ 286.406815][ T28] [ 286.409853][ T28] [ 286.409853][ T28] Showing all locks held in the system: [ 286.418566][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.423985][ T28] #0: ffffffff8bd864f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 286.434581][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.439883][ T28] #0: ffffffff8bd861f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 286.450948][ T28] 1 lock held by khungtaskd/28: [ 286.455860][ T28] #0: ffffffff8bd87040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 286.465938][ T28] 2 locks held by getty/3282: [ 286.470709][ T28] #0: ffff88814a6ad098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 286.480561][ T28] #1: ffffc90002d162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 286.490810][ T28] 3 locks held by kworker/0:4/3609: [ 286.496041][ T28] #0: ffff888011864d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 286.506485][ T28] #1: ffffc9000302fda8 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 286.519668][ T28] #2: ffff88807056a8d8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0x127/0x190 [ 286.529670][ T28] 1 lock held by syz-executor112/3616: [ 286.535165][ T28] #0: ffff888070938210 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 286.545822][ T28] [ 286.548161][ T28] ============================================= [ 286.548161][ T28] [ 286.556642][ T28] NMI backtrace for cpu 0 [ 286.560971][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 286.570335][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.580385][ T28] Call Trace: [ 286.583662][ T28] [ 286.586588][ T28] dump_stack_lvl+0xcd/0x134 [ 286.591256][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 286.596550][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 286.601754][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 286.607756][ T28] watchdog+0xc18/0xf50 [ 286.611917][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.617899][ T28] kthread+0x2e9/0x3a0 [ 286.621967][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.627599][ T28] ret_from_fork+0x1f/0x30 [ 286.632031][ T28] [ 286.635258][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.640480][ C1] NMI backtrace for cpu 1 [ 286.640490][ C1] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 286.640510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.640522][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.640550][ C1] RIP: 0010:lock_release+0x180/0x780 [ 286.640571][ C1] Code: 56 b4 1a 08 48 89 da 83 e3 07 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c7 44 24 40 01 00 00 00 83 c3 03 65 ff 05 98 ef a3 7e <0f> b6 04 02 65 4c 8b 3c 25 80 6f 02 00 38 c3 7c 08 84 c0 0f 85 1c [ 286.640587][ C1] RSP: 0018:ffffc90001577900 EFLAGS: 00000002 [ 286.640600][ C1] RAX: dffffc0000000000 RBX: 0000000000000007 RCX: 0000000000000001 [ 286.640612][ C1] RDX: 1ffffffff1b7a551 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.640623][ C1] RBP: 1ffff920002aef22 R08: 0000000000000000 R09: 0000000000000000 [ 286.640633][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880119c3138 [ 286.640644][ C1] R13: 0000000000000001 R14: ffff888017e60000 R15: ffffffff8bec9160 [ 286.640656][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 286.640671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.640683][ C1] CR2: 00005586ba115028 CR3: 000000000ba8e000 CR4: 00000000003506e0 [ 286.640695][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.640706][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.640717][ C1] Call Trace: [ 286.640721][ C1] [ 286.640727][ C1] ? __text_poke+0x5d2/0x8e0 [ 286.640744][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.640762][ C1] ? mark_held_locks+0x9f/0xe0 [ 286.640779][ C1] ? __text_poke+0x6df/0x8e0 [ 286.640795][ C1] ? kmem_cache_alloc_node+0x11c/0x500 [ 286.640812][ C1] _raw_spin_unlock+0x12/0x40 [ 286.640839][ C1] __text_poke+0x5d2/0x8e0 [ 286.640854][ C1] ? cpumask_weight+0x40/0x40 [ 286.640882][ C1] ? optimize_nops+0x2d0/0x2d0 [ 286.640898][ C1] ? text_poke_memset+0x60/0x60 [ 286.640917][ C1] text_poke_bp_batch+0x44a/0x6c0 [ 286.640934][ C1] ? kmem_cache_alloc_node+0x11c/0x500 [ 286.640952][ C1] ? do_sync_core+0x20/0x20 [ 286.640972][ C1] ? __jump_label_update+0x351/0x400 [ 286.640993][ C1] text_poke_finish+0x16/0x30 [ 286.641010][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 286.641035][ C1] jump_label_update+0x32f/0x410 [ 286.641054][ C1] static_key_disable_cpuslocked+0x152/0x1b0 [ 286.641075][ C1] static_key_disable+0x16/0x20 [ 286.641092][ C1] toggle_allocation_gate+0x183/0x390 [ 286.641115][ C1] ? lock_release+0x780/0x780 [ 286.641131][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 286.641154][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 286.641178][ C1] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 286.641201][ C1] process_one_work+0x991/0x1610 [ 286.641227][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.641250][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.641268][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 286.641296][ C1] worker_thread+0x665/0x1080 [ 286.641321][ C1] ? __kthread_parkme+0x15f/0x220 [ 286.641339][ C1] ? process_one_work+0x1610/0x1610 [ 286.641366][ C1] kthread+0x2e9/0x3a0 [ 286.641383][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.641403][ C1] ret_from_fork+0x1f/0x30 [ 286.641432][ C1] [ 286.642213][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.968364][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 286.977729][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 286.987779][ T28] Call Trace: [ 286.991059][ T28] [ 286.993983][ T28] dump_stack_lvl+0xcd/0x134 [ 286.998586][ T28] panic+0x2d7/0x636 [ 287.002516][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 287.008506][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 287.013709][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 287.019084][ T28] ? watchdog.cold+0x130/0x158 [ 287.023865][ T28] watchdog.cold+0x141/0x158 [ 287.028456][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 287.034440][ T28] kthread+0x2e9/0x3a0 [ 287.038509][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.044231][ T28] ret_from_fork+0x1f/0x30 [ 287.048659][ T28] [ 287.051997][ T28] Kernel Offset: disabled [ 287.056326][ T28] Rebooting in 86400 seconds..