./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1802923344 <...> Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. execve("./syz-executor1802923344", ["./syz-executor1802923344"], 0x7ffff8a99de0 /* 10 vars */) = 0 brk(NULL) = 0x555573d9e000 brk(0x555573d9ed00) = 0x555573d9ed00 arch_prctl(ARCH_SET_FS, 0x555573d9e380) = 0 set_tid_address(0x555573d9e650) = 5071 set_robust_list(0x555573d9e660, 24) = 0 rseq(0x555573d9eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1802923344", 4096) = 28 getrandom("\xc6\xe9\x82\xc5\xa0\x01\x48\x33", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555573d9ed00 brk(0x555573dbfd00) = 0x555573dbfd00 brk(0x555573dc0000) = 0x555573dc0000 mprotect(0x7f44eeae7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555573d9e650) = 5072 [pid 5072] set_robust_list(0x555573d9e660, 24) = 0 [pid 5072] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setsid() = 1 [pid 5072] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5072] unshare(CLONE_NEWNS) = 0 [pid 5072] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5072] unshare(CLONE_NEWIPC) = 0 [pid 5072] unshare(CLONE_NEWCGROUP) = 0 [pid 5072] unshare(CLONE_NEWUTS) = 0 [pid 5072] unshare(CLONE_SYSVSEM) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "16777216", 8) = 8 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "536870912", 9) = 9 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "8192", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5072] close(3) = 0 [pid 5072] getpid() = 1 [pid 5072] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5072] kill(-2, SIGKILL) = 0 [pid 5072] kill(2, SIGKILL) = 0 [pid 5072] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555573d9f6f0 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, 0x555573d9f6f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [ 76.994756][ T44] cfg80211: failed to load regulatory.db [ 286.912305][ T30] INFO: task syz-executor180:5075 blocked for more than 143 seconds. [ 286.920514][ T30] Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0 [ 286.928214][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.937080][ T30] task:syz-executor180 state:D stack:16312 pid:5075 tgid:5075 ppid:5072 flags:0x00004006 [ 286.947333][ T30] Call Trace: [ 286.950625][ T30] [ 286.953654][ T30] __schedule+0x1796/0x4a00 [ 286.958387][ T30] ? __pfx___schedule+0x10/0x10 [ 286.963291][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.968377][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.973480][ T30] ? schedule+0x90/0x320 [ 286.977744][ T30] schedule+0x14b/0x320 [ 286.981899][ T30] __closure_sync+0x259/0x2f0 [ 286.986629][ T30] ? __closure_sync+0x149/0x2f0 [ 286.991492][ T30] ? __pfx___closure_sync+0x10/0x10 [ 286.996777][ T30] __bch2_write+0x5458/0x5bd0 [ 287.001547][ T30] ? __pfx___bch2_write+0x10/0x10 [ 287.006672][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.011738][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.017045][ T30] bch2_write+0x947/0x1590 [ 287.021488][ T30] ? __pfx_bch2_write+0x10/0x10 [ 287.026390][ T30] ? bio_uninit+0x2b0/0x3b0 [ 287.030980][ T30] ? iov_iter_revert+0x1c8/0x390 [ 287.036077][ T30] ? bch2_direct_write+0x1160/0x3050 [ 287.041400][ T30] bch2_direct_write+0x1a52/0x3050 [ 287.047153][ T30] ? __pfx_bch2_direct_write+0x10/0x10 [ 287.052755][ T30] bch2_write_iter+0x206/0x2840 [ 287.057631][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.062700][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 287.068017][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 287.073587][ T30] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 287.079502][ T30] vfs_write+0xa84/0xcb0 [ 287.083859][ T30] ? __pfx_vfs_write+0x10/0x10 [ 287.088642][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.094023][ T30] ? __fdget_pos+0x272/0x320 [ 287.098658][ T30] ksys_write+0x1a0/0x2c0 [ 287.103054][ T30] ? __pfx_ksys_write+0x10/0x10 [ 287.107956][ T30] ? do_syscall_64+0x102/0x240 [ 287.112865][ T30] do_syscall_64+0xf5/0x240 [ 287.117384][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.122190][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.128099][ T30] RIP: 0033:0x7f44eea6e0f9 [ 287.132626][ T30] RSP: 002b:00007fffe7f70a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.141067][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f44eea6e0f9 [ 287.149189][ T30] RDX: 00000000175d9003 RSI: 0000000020000200 RDI: 0000000000000004 [ 287.157233][ T30] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 287.165251][ T30] R10: 0000555500000000 R11: 0000000000000246 R12: 00000000000f4240 [ 287.173279][ T30] R13: 00007fffe7f70ca8 R14: 0000000000000001 R15: 00007fffe7f70a70 [ 287.181256][ T30] [ 287.184395][ T30] [ 287.184395][ T30] Showing all locks held in the system: [ 287.192191][ T30] 5 locks held by kworker/u8:1/11: [ 287.197318][ T30] 1 lock held by khungtaskd/30: [ 287.202239][ T30] #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.212212][ T30] 2 locks held by getty/4825: [ 287.216878][ T30] #0: ffff88802ad9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.226749][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.236986][ T30] 2 locks held by syz-executor180/5075: [ 287.242584][ T30] #0: ffff8880756c6420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 287.251500][ T30] #1: ffff8880769c08b8 (&sb->s_type->i_mutex_key#16){+.+.}-{3:3}, at: bch2_direct_write+0x243/0x3050 [ 287.262562][ T30] [ 287.264889][ T30] ============================================= [ 287.264889][ T30] [ 287.273341][ T30] NMI backtrace for cpu 0 [ 287.277676][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0 [ 287.287464][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.297519][ T30] Call Trace: [ 287.300811][ T30] [ 287.303741][ T30] dump_stack_lvl+0x241/0x360 [ 287.308451][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.313859][ T30] ? __pfx__printk+0x10/0x10 [ 287.318532][ T30] ? vprintk_emit+0x631/0x770 [ 287.323219][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.328268][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.333262][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.338746][ T30] ? _printk+0xd5/0x120 [ 287.342891][ T30] ? __pfx__printk+0x10/0x10 [ 287.347474][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.352316][ T30] ? __pfx__printk+0x10/0x10 [ 287.356892][ T30] ? wq_watchdog_touch+0x72/0x110 [ 287.361928][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.367921][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.373891][ T30] watchdog+0xfde/0x1020 [ 287.378132][ T30] ? watchdog+0x1ea/0x1020 [ 287.382556][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.387216][ T30] kthread+0x2f0/0x390 [ 287.391271][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.395946][ T30] ? __pfx_kthread+0x10/0x10 [ 287.400537][ T30] ret_from_fork+0x4b/0x80 [ 287.405129][ T30] ? __pfx_kthread+0x10/0x10 [ 287.409722][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.414493][ T30] [ 287.417647][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.422922][ C1] NMI backtrace for cpu 1 [ 287.422934][ C1] CPU: 1 PID: 11 Comm: kworker/u8:1 Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0 [ 287.422950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.422960][ C1] Workqueue: events_unbound toggle_allocation_gate [ 287.422983][ C1] RIP: 0010:__lock_acquire+0x5a/0x1fd0 [ 287.423002][ C1] Code: 02 a8 8f 48 c1 e8 03 48 be 00 00 00 00 00 fc ff df 0f b6 04 30 84 c0 0f 85 4b 16 00 00 83 3d a8 6f 35 0e 00 0f 84 1c 11 00 00 <83> 3d 0f 84 ad 0c 00 74 2c 4c 89 e0 48 c1 e8 03 80 3c 30 00 74 12 [ 287.423014][ C1] RSP: 0018:ffffc90000107330 EFLAGS: 00000002 [ 287.423026][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 287.423036][ C1] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff8e334da0 [ 287.423046][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.423055][ C1] R10: dffffc0000000000 R11: fffffbfff1f4f9e6 R12: ffffffff8e334da0 [ 287.423066][ C1] R13: 0000000000000000 R14: ffff88801769bc00 R15: 0000000000000002 [ 287.423076][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 287.423089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.423100][ C1] CR2: 00005591d813c680 CR3: 000000000e134000 CR4: 00000000003506f0 [ 287.423113][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.423122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.423131][ C1] Call Trace: [ 287.423138][ C1] [ 287.423144][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.423161][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.423177][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.423199][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.423217][ C1] ? nmi_handle+0x14f/0x5a0 [ 287.423260][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.423275][ C1] ? __lock_acquire+0x5a/0x1fd0 [ 287.423289][ C1] ? default_do_nmi+0x63/0x160 [ 287.423306][ C1] ? exc_nmi+0x123/0x1f0 [ 287.423321][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.423343][ C1] ? __lock_acquire+0x5a/0x1fd0 [ 287.423358][ C1] ? __lock_acquire+0x5a/0x1fd0 [ 287.423373][ C1] ? __lock_acquire+0x5a/0x1fd0 [ 287.423387][ C1] [ 287.423392][ C1] [ 287.423400][ C1] ? mark_lock+0x9a/0x350 [ 287.423419][ C1] lock_acquire+0x1ed/0x550 [ 287.423433][ C1] ? __pte_offset_map+0x82/0x380 [ 287.423466][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.423488][ C1] ? __pfx_switch_ldt+0x10/0x10 [ 287.423504][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.423521][ C1] __pte_offset_map+0x9e/0x380 [ 287.423540][ C1] ? __pte_offset_map+0x82/0x380 [ 287.423560][ C1] ? __pfx___pte_offset_map+0x10/0x10 [ 287.423584][ C1] __pte_offset_map_lock+0xc7/0x300 [ 287.423604][ C1] ? __text_poke+0xaf1/0xd30 [ 287.423621][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.423636][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 287.423656][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.423675][ C1] ? walk_to_pmd+0x19b/0x240 [ 287.423702][ C1] ? kmalloc_node_trace+0xb6/0x3a0 [ 287.423722][ C1] __text_poke+0x2c5/0xd30 [ 287.423737][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 287.423755][ C1] ? kmalloc_trace+0xb2/0x360 [ 287.423773][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 287.423791][ C1] ? __pfx___text_poke+0x10/0x10 [ 287.423806][ C1] ? kmem_cache_alloc_bulk+0x16d/0x790 [ 287.423828][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 287.423855][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 287.423886][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 287.423904][ C1] ? __pfx___might_resched+0x10/0x10 [ 287.423927][ C1] text_poke_bp_batch+0x8cd/0xb30 [ 287.423949][ C1] ? kmem_cache_alloc_bulk+0x16e/0x790 [ 287.423969][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 287.423989][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 287.424010][ C1] ? process_scheduled_works+0x91b/0x17c0 [ 287.424025][ C1] text_poke_finish+0x30/0x50 [ 287.424042][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 287.424061][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 287.424079][ C1] static_key_enable+0x1a/0x20 [ 287.424095][ C1] toggle_allocation_gate+0xb5/0x250 [ 287.424113][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 287.424131][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.424151][ C1] process_scheduled_works+0xa10/0x17c0 [ 287.424177][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.424196][ C1] ? assign_work+0x364/0x3d0 [ 287.424212][ C1] worker_thread+0x86d/0xd70 [ 287.424234][ C1] ? __kthread_parkme+0x169/0x1d0 [ 287.424251][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.424267][ C1] kthread+0x2f0/0x390 [ 287.424283][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.424298][ C1] ? __pfx_kthread+0x10/0x10 [ 287.424315][ C1] ret_from_fork+0x4b/0x80 [ 287.424334][ C1] ? __pfx_kthread+0x10/0x10 [ 287.424350][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.424376][ C1] [ 287.424383][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.460 msecs [ 287.424920][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.916846][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0 [ 287.926903][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.936971][ T30] Call Trace: [ 287.940258][ T30] [ 287.943188][ T30] dump_stack_lvl+0x241/0x360 [ 287.947877][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.953073][ T30] ? __pfx__printk+0x10/0x10 [ 287.957655][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.963638][ T30] ? vscnprintf+0x5d/0x90 [ 287.967981][ T30] panic+0x349/0x860 [ 287.971871][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.978015][ T30] ? __pfx_panic+0x10/0x10 [ 287.982424][ T30] ? __pfx_delay_tsc+0x10/0x10 [ 287.987178][ T30] ? nmi_backtrace_stall_check+0x431/0x440 [ 287.992977][ T30] ? irq_work_queue+0xd1/0x150 [ 287.997769][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.003750][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.009723][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.015694][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 288.021844][ T30] watchdog+0x101d/0x1020 [ 288.026166][ T30] ? watchdog+0x1ea/0x1020 [ 288.030594][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.035264][ T30] kthread+0x2f0/0x390 [ 288.039341][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.044006][ T30] ? __pfx_kthread+0x10/0x10 [ 288.048594][ T30] ret_from_fork+0x4b/0x80 [ 288.053006][ T30] ? __pfx_kthread+0x10/0x10 [ 288.057586][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.062356][ T30] [ 288.065442][ T30] Kernel Offset: disabled [ 288.069751][ T30] Rebooting in 86400 seconds..