./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor856386888 <...> Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. execve("./syz-executor856386888", ["./syz-executor856386888"], 0x7ffdb2d82c60 /* 10 vars */) = 0 brk(NULL) = 0x5555804f2000 brk(0x5555804f2d40) = 0x5555804f2d40 arch_prctl(ARCH_SET_FS, 0x5555804f23c0) = 0 set_tid_address(0x5555804f2690) = 5236 set_robust_list(0x5555804f26a0, 24) = 0 rseq(0x5555804f2ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor856386888", 4096) = 27 getrandom("\x64\x82\x66\x1c\x59\x1d\x5e\x30", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555804f2d40 brk(0x555580513d40) = 0x555580513d40 brk(0x555580514000) = 0x555580514000 mprotect(0x7fbd14dba000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5237 attached [pid 5237] set_robust_list(0x5555804f26a0, 24 [pid 5236] <... clone resumed>, child_tidptr=0x5555804f2690) = 5237 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5236] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5237] mkdir("./syzkaller.J8TZNx", 0700./strace-static-x86_64: Process 5238 attached ) = 0 [pid 5238] set_robust_list(0x5555804f26a0, 24 [pid 5236] <... clone resumed>, child_tidptr=0x5555804f2690) = 5238 [pid 5237] chmod("./syzkaller.J8TZNx", 0777 [pid 5236] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5238] <... set_robust_list resumed>) = 0 [pid 5237] <... chmod resumed>) = 0 [pid 5238] mkdir("./syzkaller.Jhm9V6", 0700 [pid 5237] chdir("./syzkaller.J8TZNx"./strace-static-x86_64: Process 5239 attached ) = 0 [pid 5237] mkdir("./0", 0777 [pid 5236] <... clone resumed>, child_tidptr=0x5555804f2690) = 5239 [pid 5239] set_robust_list(0x5555804f26a0, 24 [pid 5238] <... mkdir resumed>) = 0 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5237] <... mkdir resumed>) = 0 [pid 5236] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5238] chmod("./syzkaller.Jhm9V6", 0777./strace-static-x86_64: Process 5240 attached [pid 5239] mkdir("./syzkaller.uFRNIj", 0700 [pid 5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5238] <... chmod resumed>) = 0 [pid 5240] set_robust_list(0x5555804f26a0, 24) = 0 [pid 5239] <... mkdir resumed>) = 0 [pid 5238] chdir("./syzkaller.Jhm9V6" [pid 5237] <... openat resumed>) = 3 [pid 5236] <... clone resumed>, child_tidptr=0x5555804f2690) = 5240 [pid 5240] mkdir("./syzkaller.OkccT4", 0700 [pid 5238] <... chdir resumed>) = 0 [pid 5237] ioctl(3, LOOP_CLR_FD [pid 5239] chmod("./syzkaller.uFRNIj", 0777 [pid 5236] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] <... chmod resumed>) = 0 [pid 5238] mkdir("./0", 0777 [pid 5237] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5239] chdir("./syzkaller.uFRNIj") = 0 [pid 5239] mkdir("./0", 0777./strace-static-x86_64: Process 5241 attached ) = 0 [pid 5238] <... mkdir resumed>) = 0 [pid 5241] set_robust_list(0x5555804f26a0, 24) = 0 [pid 5241] mkdir("./syzkaller.gZjRUI", 0700 [pid 5240] <... mkdir resumed>) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5237] close(3 [pid 5238] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5236] <... clone resumed>, child_tidptr=0x5555804f2690) = 5241 [pid 5240] chmod("./syzkaller.OkccT4", 0777 [pid 5239] <... openat resumed>) = 3 [pid 5237] <... close resumed>) = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] <... chmod resumed>) = 0 [pid 5239] ioctl(3, LOOP_CLR_FD [pid 5238] <... openat resumed>) = 3 [pid 5240] chdir("./syzkaller.OkccT4" [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5239] close(3) = 0 [pid 5239] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5243 attached [pid 5238] ioctl(3, LOOP_CLR_FD [pid 5240] <... chdir resumed>) = 0 [pid 5243] set_robust_list(0x5555804f26a0, 24 [pid 5241] chmod("./syzkaller.gZjRUI", 0777 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5241] <... chmod resumed>) = 0 [pid 5239] <... clone resumed>, child_tidptr=0x5555804f2690) = 5243 [pid 5243] chdir("./0") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] chdir("./syzkaller.gZjRUI" [pid 5240] mkdir("./0", 0777./strace-static-x86_64: Process 5244 attached [pid 5238] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5243] <... prctl resumed>) = 0 [pid 5241] <... chdir resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5238] close(3 [pid 5237] <... clone resumed>, child_tidptr=0x5555804f2690) = 5244 [pid 5244] set_robust_list(0x5555804f26a0, 24 [pid 5243] setpgid(0, 0 [pid 5241] mkdir("./0", 0777 [pid 5240] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5238] <... close resumed>) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5244] chdir("./0" [pid 5243] <... setpgid resumed>) = 0 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] <... openat resumed>) = 3 [pid 5238] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] <... chdir resumed>) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5245 attached ) = 0 [pid 5245] set_robust_list(0x5555804f26a0, 24 [pid 5244] setpgid(0, 0 [pid 5243] <... openat resumed>) = 3 [pid 5244] <... setpgid resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5245] <... set_robust_list resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] write(3, "1000", 4 [pid 5241] <... openat resumed>) = 3 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5238] <... clone resumed>, child_tidptr=0x5555804f2690) = 5245 [pid 5245] chdir("./0" [pid 5244] <... openat resumed>) = 3 [pid 5240] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5245] <... chdir resumed>) = 0 [pid 5244] write(3, "1000", 4 [pid 5240] close(3 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] <... write resumed>) = 4 [pid 5240] <... close resumed>) = 0 [pid 5243] <... write resumed>) = 4 [pid 5245] <... prctl resumed>) = 0 [pid 5244] close(3 [pid 5243] close(3 [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] setpgid(0, 0 [pid 5244] <... close resumed>) = 0 [pid 5243] <... close resumed>) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5246 attached executing program [pid 5244] <... symlink resumed>) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs" [pid 5246] set_robust_list(0x5555804f26a0, 24 [pid 5245] <... setpgid resumed>) = 0 [pid 5244] write(1, "executing program\n", 18 [pid 5246] <... set_robust_list resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] <... write resumed>) = 18 [pid 5243] <... symlink resumed>) = 0 [pid 5244] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] chdir("./0" [pid 5245] <... openat resumed>) = 3 [pid 5244] <... futex resumed>) = 0 [pid 5241] close(3 [pid 5244] rt_sigaction(SIGRT_1, {sa_handler=0x7fbd14d54fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbd14d46190}, [pid 5240] <... clone resumed>, child_tidptr=0x5555804f2690) = 5246 [pid 5244] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5245] write(3, "1000", 4 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5245] <... write resumed>) = 4 [pid 5244] <... mmap resumed>) = 0x7fbd14cc5000 [pid 5245] close(3 [pid 5244] mprotect(0x7fbd14cc6000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 5245] <... close resumed>) = 0 [pid 5244] <... mprotect resumed>) = 0 [pid 5243] write(1, "executing program\n", 18 [pid 5241] <... close resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] <... write resumed>) = 18 executing program [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5245] <... symlink resumed>) = 0 [pid 5243] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14ce5990, parent_tid=0x7fbd14ce5990, exit_signal=0, stack=0x7fbd14cc5000, stack_size=0x20300, tls=0x7fbd14ce56c0}./strace-static-x86_64: Process 5247 attached => {parent_tid=[5247]}, 88) = 5247 ./strace-static-x86_64: Process 5248 attached [pid 5247] rseq(0x7fbd14ce5fe0, 0x20, 0, 0x53053053 [pid 5246] <... prctl resumed>) = 0 [pid 5245] write(1, "executing program\n", 18 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = 0 [pid 5247] <... rseq resumed>) = 0 [pid 5246] setpgid(0, 0 [pid 5245] <... write resumed>) = 18 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] rt_sigaction(SIGRT_1, {sa_handler=0x7fbd14d54fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbd14d46190}, [pid 5248] set_robust_list(0x5555804f26a0, 24 [pid 5247] set_robust_list(0x7fbd14ce59a0, 24 [pid 5246] <... setpgid resumed>) = 0 [pid 5245] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] rt_sigaction(SIGRT_1, {sa_handler=0x7fbd14d54fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbd14d46190}, [pid 5244] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5248] chdir("./0" [pid 5247] memfd_create("syzkaller", 0 [pid 5245] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5241] <... clone resumed>, child_tidptr=0x5555804f2690) = 5248 [pid 5248] <... chdir resumed>) = 0 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5248] <... prctl resumed>) = 0 [pid 5247] <... memfd_create resumed>) = 3 [pid 5246] <... openat resumed>) = 3 [pid 5245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] <... mmap resumed>) = 0x7fbd14cc5000 [pid 5248] setpgid(0, 0 [pid 5246] write(3, "1000", 4 [pid 5243] mprotect(0x7fbd14cc6000, 131072, PROT_READ|PROT_WRITE [pid 5248] <... setpgid resumed>) = 0 [pid 5246] <... write resumed>) = 4 [pid 5246] close(3 [pid 5243] <... mprotect resumed>) = 0 [pid 5246] <... close resumed>) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5247] <... mmap resumed>) = 0x7fbd0c800000 [pid 5246] <... symlink resumed>) = 0 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14ce5990, parent_tid=0x7fbd14ce5990, exit_signal=0, stack=0x7fbd14cc5000, stack_size=0x20300, tls=0x7fbd14ce56c0} [pid 5245] <... mmap resumed>) = 0x7fbd14cc5000 ./strace-static-x86_64: Process 5250 attached [pid 5245] mprotect(0x7fbd14cc6000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 5248] write(3, "1000", 4 [pid 5246] write(1, "executing program\n", 18 [pid 5245] <... mprotect resumed>) = 0 [pid 5243] <... clone3 resumed> => {parent_tid=[5250]}, 88) = 5250 [pid 5250] rseq(0x7fbd14ce5fe0, 0x20, 0, 0x53053053 [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] <... rseq resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5250] set_robust_list(0x7fbd14ce59a0, 24 [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14ce5990, parent_tid=0x7fbd14ce5990, exit_signal=0, stack=0x7fbd14cc5000, stack_size=0x20300, tls=0x7fbd14ce56c0} [pid 5250] <... set_robust_list resumed>) = 0 [pid 5248] <... write resumed>) = 4 [pid 5246] <... write resumed>) = 18 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5251 attached [pid 5250] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] close(3 [pid 5247] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5246] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... clone3 resumed> => {parent_tid=[5251]}, 88) = 5251 [pid 5243] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] rseq(0x7fbd14ce5fe0, 0x20, 0, 0x53053053 [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] <... close resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = 0 [pid 5251] <... rseq resumed>) = 0 [pid 5250] memfd_create("syzkaller", 0 [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... write resumed>) = 65536 [pid 5246] rt_sigaction(SIGRT_1, {sa_handler=0x7fbd14d54fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbd14d46190}, [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 5243] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5251] set_robust_list(0x7fbd14ce59a0, 24 [pid 5250] <... memfd_create resumed>) = 3 [pid 5248] <... symlink resumed>) = 0 [pid 5246] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5245] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5248] write(1, "executing program\n", 18 [pid 5246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5245] <... futex resumed>) = 0 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5248] <... write resumed>) = 18 [pid 5247] munmap(0x7fbd0c800000, 138412032 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5250] <... mmap resumed>) = 0x7fbd0c800000 [pid 5248] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... munmap resumed>) = 0 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5251] memfd_create("syzkaller", 0 [pid 5248] <... futex resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5246] <... mmap resumed>) = 0x7fbd14cc5000 [pid 5251] <... memfd_create resumed>) = 3 [pid 5248] rt_sigaction(SIGRT_1, {sa_handler=0x7fbd14d54fe0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbd14d46190}, [pid 5246] mprotect(0x7fbd14cc6000, 131072, PROT_READ|PROT_WRITE [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5248] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] <... openat resumed>) = 4 [pid 5246] <... mprotect resumed>) = 0 [pid 5251] <... mmap resumed>) = 0x7fbd0c800000 [pid 5248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5250] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5251] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14ce5990, parent_tid=0x7fbd14ce5990, exit_signal=0, stack=0x7fbd14cc5000, stack_size=0x20300, tls=0x7fbd14ce56c0} [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] <... clone3 resumed> => {parent_tid=[5252]}, 88) = 5252 [pid 5248] <... mmap resumed>) = 0x7fbd14cc5000 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5248] mprotect(0x7fbd14cc6000, 131072, PROT_READ|PROT_WRITE [pid 5246] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... mprotect resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5246] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5252 attached [pid 5250] <... write resumed>) = 65536 [pid 5247] <... ioctl resumed>) = 0 [pid 5252] rseq(0x7fbd14ce5fe0, 0x20, 0, 0x53053053 [pid 5251] <... write resumed>) = 65536 [pid 5250] munmap(0x7fbd0c800000, 138412032 [pid 5247] close(3 [pid 5252] <... rseq resumed>) = 0 [pid 5250] <... munmap resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5252] set_robust_list(0x7fbd14ce59a0, 24 [pid 5251] munmap(0x7fbd0c800000, 138412032 [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5248] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5247] close(4 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5250] <... openat resumed>) = 4 [pid 5247] <... close resumed>) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] <... munmap resumed>) = 0 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14ce5990, parent_tid=0x7fbd14ce5990, exit_signal=0, stack=0x7fbd14cc5000, stack_size=0x20300, tls=0x7fbd14ce56c0} [pid 5247] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 [pid 5252] memfd_create("syzkaller", 0) = 3 [pid 5251] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5248] <... clone3 resumed> => {parent_tid=[5253]}, 88) = 5253 [pid 5251] <... openat resumed>) = 4 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5253 attached [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5251] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] <... mkdir resumed>) = 0 [pid 5252] <... mmap resumed>) = 0x7fbd0c800000 [pid 5247] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", MS_RDONLY|MS_NODEV|MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT|MS_LAZYTIME, "\xff" [pid 5253] rseq(0x7fbd14ce5fe0, 0x20, 0, 0x53053053 [pid 5252] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [ 133.812155][ T5247] loop0: detected capacity change from 0 to 128 [ 133.824819][ T5250] loop2: detected capacity change from 0 to 128 [ 133.837673][ T5251] loop1: detected capacity change from 0 to 128 [ 133.838019][ T5247] ======================================================= [ 133.838019][ T5247] WARNING: The mand mount option has been deprecated and [pid 5251] <... ioctl resumed>) = 0 [pid 5250] <... ioctl resumed>) = 0 [pid 5248] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... rseq resumed>) = 0 [pid 5252] <... write resumed>) = 65536 [pid 5251] close(3 [pid 5250] close(3 [pid 5248] <... futex resumed>) = 0 [pid 5253] set_robust_list(0x7fbd14ce59a0, 24 [pid 5251] <... close resumed>) = 0 [pid 5248] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] <... set_robust_list resumed>) = 0 [pid 5252] munmap(0x7fbd0c800000, 138412032 [pid 5251] close(4 [pid 5250] <... close resumed>) = 0 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] <... close resumed>) = 0 [pid 5252] <... munmap resumed>) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5251] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 [pid 5247] <... mount resumed>) = 0 [pid 5253] memfd_create("syzkaller", 0 [pid 5250] close(4 [pid 5247] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY [pid 5253] <... memfd_create resumed>) = 3 [pid 5251] <... mkdir resumed>) = 0 [pid 5247] <... openat resumed>) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5251] mount("/dev/loop1", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", MS_RDONLY|MS_NODEV|MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT|MS_LAZYTIME, "\xff" [pid 5253] <... mmap resumed>) = 0x7fbd0c800000 [pid 5250] <... close resumed>) = 0 [pid 5247] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" [pid 5253] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5247] <... chdir resumed>) = 0 [pid 5253] <... write resumed>) = 65536 [pid 5252] <... ioctl resumed>) = 0 [pid 5251] <... mount resumed>) = 0 [pid 5250] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5253] munmap(0x7fbd0c800000, 138412032 [pid 5252] close(3 [pid 5251] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY [pid 5253] <... munmap resumed>) = 0 [pid 5252] <... close resumed>) = 0 [pid 5251] <... openat resumed>) = 3 [pid 5250] <... mkdir resumed>) = 0 [pid 5247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] close(4 [pid 5251] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" [pid 5250] mount("/dev/loop2", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", MS_RDONLY|MS_NODEV|MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT|MS_LAZYTIME, "\xff" [pid 5247] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5252] <... close resumed>) = 0 [pid 5251] <... chdir resumed>) = 0 [pid 5247] <... futex resumed>) = 1 [pid 5253] <... openat resumed>) = 4 [pid 5252] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 [pid 5251] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5250] <... mount resumed>) = 0 [pid 5247] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] <... futex resumed>) = 0 [pid 5250] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 133.838019][ T5247] and is ignored by this kernel. Remove the mand [ 133.838019][ T5247] option from the mount to silence this warning. [ 133.838019][ T5247] ======================================================= [ 133.885465][ T5252] loop3: detected capacity change from 0 to 128 [pid 5244] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5250] <... openat resumed>) = 3 [pid 5247] openat(AT_FDCWD, ".", O_RDONLY [pid 5244] <... futex resumed>) = 0 [pid 5250] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0 [pid 5247] <... openat resumed>) = 4 [pid 5244] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] <... mkdir resumed>) = 0 [pid 5251] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5247] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] mount("/dev/loop3", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", MS_RDONLY|MS_NODEV|MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT|MS_LAZYTIME, "\xff" [pid 5251] <... futex resumed>) = 1 [pid 5250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5247] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5244] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] getdents64(4, [pid 5245] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... futex resumed>) = 0 [pid 5251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5250] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5251] openat(AT_FDCWD, ".", O_RDONLY [pid 5245] <... futex resumed>) = 0 [pid 5244] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... openat resumed>) = 4 [pid 5251] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... ioctl resumed>) = 0 [pid 5252] <... mount resumed>) = 0 [pid 5250] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3 [pid 5253] close(3 [pid 5252] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] <... close resumed>) = 0 [pid 5252] <... chdir resumed>) = 0 [pid 5250] openat(AT_FDCWD, ".", O_RDONLY [pid 5245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [ 133.929686][ T5253] loop4: detected capacity change from 0 to 128 [ 133.946198][ T5247] syz-executor856: attempt to access beyond end of device [ 133.946198][ T5247] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 133.961915][ T5247] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 133.970689][ T5247] syz-executor856: attempt to access beyond end of device [pid 5253] close(4 [pid 5252] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5250] <... openat resumed>) = 4 [pid 5245] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... close resumed>) = 0 [pid 5252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 [pid 5252] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] <... futex resumed>) = 0 [pid 5245] <... futex resumed>) = 1 [pid 5251] getdents64(4, [ 133.970689][ T5247] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 133.984614][ T5251] syz-executor856: attempt to access beyond end of device [ 133.984614][ T5251] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 133.985205][ T5247] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 134.007523][ T5251] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 134.008187][ T5247] syz-executor856: attempt to access beyond end of device [ 134.008187][ T5247] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [pid 5245] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... mkdir resumed>) = 0 [pid 5250] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5246] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7fbd14dc06dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbd14ca4000 [pid 5244] mprotect(0x7fbd14ca5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14cc4990, parent_tid=0x7fbd14cc4990, exit_signal=0, stack=0x7fbd14ca4000, stack_size=0x20300, tls=0x7fbd14cc46c0} => {parent_tid=[5254]}, 88) = 5254 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5244] futex(0x7fbd14dc06d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7fbd14dc06dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5254 attached [pid 5253] mount("/dev/loop4", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", MS_RDONLY|MS_NODEV|MS_SYNCHRONOUS|MS_MANDLOCK|MS_SILENT|MS_LAZYTIME, "\xff" [pid 5246] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5250] <... futex resumed>) = 1 [pid 5250] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] rseq(0x7fbd14cc4fe0, 0x20, 0, 0x53053053) = 0 [pid 5245] futex(0x7fbd14dc06dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] set_robust_list(0x7fbd14cc49a0, 24 [pid 5246] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5252] <... futex resumed>) = 0 [pid 5252] openat(AT_FDCWD, ".", O_RDONLY [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... mmap resumed>) = 0x7fbd14ca4000 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5252] <... openat resumed>) = 4 [pid 5245] mprotect(0x7fbd14ca5000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... futex resumed>) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5254] getdents64(4, [pid 5245] <... mprotect resumed>) = 0 [pid 5253] <... mount resumed>) = 0 [pid 5252] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY [pid 5252] <... futex resumed>) = 1 [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] <... futex resumed>) = 1 [pid 5250] <... futex resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5250] getdents64(4, [pid 5243] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... openat resumed>) = 3 [pid 5246] <... futex resumed>) = 0 [ 134.021447][ T5251] syz-executor856: attempt to access beyond end of device [ 134.021447][ T5251] loop1: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 134.030776][ T5247] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 134.060402][ T5250] syz-executor856: attempt to access beyond end of device [ 134.060402][ T5250] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [pid 5253] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" [pid 5252] getdents64(4, [pid 5246] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5253] <... chdir resumed>) = 0 [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14cc4990, parent_tid=0x7fbd14cc4990, exit_signal=0, stack=0x7fbd14ca4000, stack_size=0x20300, tls=0x7fbd14cc46c0} [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5253] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5255 attached [pid 5255] rseq(0x7fbd14cc4fe0, 0x20, 0, 0x53053053 [pid 5253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5255] <... rseq resumed>) = 0 [pid 5255] set_robust_list(0x7fbd14cc49a0, 24) = 0 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 134.075893][ T5247] syz-executor856: attempt to access beyond end of device [ 134.075893][ T5247] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 134.090323][ T5250] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 134.091658][ T5252] syz-executor856: attempt to access beyond end of device [ 134.091658][ T5252] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 134.099460][ T5250] syz-executor856: attempt to access beyond end of device [ 134.099460][ T5250] loop2: rw=0, sector=17666806, nr_sectors = 2 limit=128 [pid 5255] futex(0x7fbd14dc06d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... clone3 resumed> => {parent_tid=[5255]}, 88) = 5255 [pid 5243] futex(0x7fbd14dc06dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 1 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5253] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 5248] <... futex resumed>) = 0 [pid 5246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7fbd14dc06d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... mmap resumed>) = 0x7fbd14ca4000 [pid 5243] mprotect(0x7fbd14ca5000, 131072, PROT_READ|PROT_WRITE [pid 5245] <... futex resumed>) = 1 [pid 5253] futex(0x7fbd14dc06cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5246] futex(0x7fbd14dc06dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = 0 [pid 5245] futex(0x7fbd14dc06dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] futex(0x7fbd14dc06c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5246] <... futex resumed>) = 0 [pid 5243] <... mprotect resumed>) = 0 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5246] <... mmap resumed>) = 0x7fbd14ca4000 [pid 5243] <... rt_sigprocmask resumed>[], 8) = 0 [ 134.129257][ T5251] Buffer I/O error on dev loop1, logical block 8833403, async page read [ 134.131056][ T5247] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 134.147497][ T5252] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 134.149515][ T5247] syz-executor856: attempt to access beyond end of device [ 134.149515][ T5247] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 134.172793][ T5251] Buffer I/O error on dev loop1, logical block 13269809, async page read [pid 5248] futex(0x7fbd14dc06c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5246] mprotect(0x7fbd14ca5000, 131072, PROT_READ|PROT_WRITE [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14cc4990, parent_tid=0x7fbd14cc4990, exit_signal=0, stack=0x7fbd14ca4000, stack_size=0x20300, tls=0x7fbd14cc46c0} [pid 5255] getdents64(4, [pid 5248] futex(0x7fbd14dc06cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] getdents64(4, [pid 5246] <... mprotect resumed>) = 0 [pid 5243] <... clone3 resumed> => {parent_tid=[5256]}, 88) = 5256 ./strace-static-x86_64: Process 5256 attached [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14cc4990, parent_tid=0x7fbd14cc4990, exit_signal=0, stack=0x7fbd14ca4000, stack_size=0x20300, tls=0x7fbd14cc46c0} [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5257 attached [pid 5243] futex(0x7fbd14dc06d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5257] rseq(0x7fbd14cc4fe0, 0x20, 0, 0x53053053 [pid 5243] <... futex resumed>) = 0 [pid 5246] <... clone3 resumed> => {parent_tid=[5257]}, 88) = 5257 [pid 5257] <... rseq resumed>) = 0 [pid 5243] futex(0x7fbd14dc06dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] set_robust_list(0x7fbd14cc49a0, 24 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5257] <... set_robust_list resumed>) = 0 [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5246] futex(0x7fbd14dc06d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] rseq(0x7fbd14cc4fe0, 0x20, 0, 0x53053053) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5256] set_robust_list(0x7fbd14cc49a0, 24 [pid 5257] getdents64(4, [pid 5246] futex(0x7fbd14dc06dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5256] <... set_robust_list resumed>) = 0 [pid 5256] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 134.173388][ T5250] Buffer I/O error on dev loop2, logical block 8833403, async page read [pid 5256] getdents64(4, [pid 5248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5248] futex(0x7fbd14dc06dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fbd14ca4000 [pid 5248] mprotect(0x7fbd14ca5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbd14cc4990, parent_tid=0x7fbd14cc4990, exit_signal=0, stack=0x7fbd14ca4000, stack_size=0x20300, tls=0x7fbd14cc46c0}./strace-static-x86_64: Process 5258 attached => {parent_tid=[5258]}, 88) = 5258 [pid 5258] rseq(0x7fbd14cc4fe0, 0x20, 0, 0x53053053 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5258] <... rseq resumed>) = 0 [pid 5248] futex(0x7fbd14dc06d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] set_robust_list(0x7fbd14cc49a0, 24 [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7fbd14dc06dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5258] <... set_robust_list resumed>) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5258] getdents64(4, [pid 5246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] exit_group(0) = ? [pid 5245] exit_group(0) = ? [pid 5243] exit_group(0) = ? [pid 5246] exit_group(0) = ? [pid 5248] exit_group(0) = ? [pid 5239] kill(-5243, SIGKILL) = 0 [pid 5239] kill(5243, SIGKILL) = 0 [pid 5237] kill(-5244, SIGKILL) = 0 [pid 5237] kill(5244, SIGKILL) = 0 [pid 5238] kill(-5245, SIGKILL) = 0 [pid 5238] kill(5245, SIGKILL) = 0 [pid 5240] kill(-5246, SIGKILL) = 0 [pid 5240] kill(5246, SIGKILL) = 0 [pid 5241] kill(-5248, SIGKILL) = 0 [pid 5241] kill(5248, SIGKILL) = 0 [pid 5239] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5239] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5239] getdents64(3, 0x5555804f3730 /* 2 entries */, 32768) = 48 [pid 5239] getdents64(3, 0x5555804f3730 /* 0 entries */, 32768) = 0 [pid 5239] close(3) = 0 [pid 5237] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5237] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5237] getdents64(3, 0x5555804f3730 /* 2 entries */, 32768) = 48 [pid 5237] getdents64(3, 0x5555804f3730 /* 0 entries */, 32768) = 0 [pid 5237] close(3) = 0 [pid 5240] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5240] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5240] getdents64(3, 0x5555804f3730 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(3, 0x5555804f3730 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5241] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x5555804f3730 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(3, 0x5555804f3730 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5238] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5238] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5238] getdents64(3, 0x5555804f3730 /* 2 entries */, 32768) = 48 [pid 5238] getdents64(3, 0x5555804f3730 /* 0 entries */, 32768) = 0 [pid 5238] close(3) = 0 [ 286.730296][ T30] INFO: task syz-executor856:5256 blocked for more than 143 seconds. [ 286.738604][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 286.820140][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.828882][ T30] task:syz-executor856 state:D stack:28816 pid:5256 tgid:5243 ppid:5239 flags:0x00004006 [ 286.890138][ T30] Call Trace: [ 286.893507][ T30] [ 286.896477][ T30] __schedule+0x1843/0x4ae0 [ 286.940168][ T30] ? __pfx___schedule+0x10/0x10 [ 286.945119][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.980135][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 286.985701][ T30] ? schedule+0x90/0x320 [ 286.989999][ T30] schedule+0x14b/0x320 [ 287.030140][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.035692][ T30] __mutex_lock+0x6a7/0xd70 [ 287.070141][ T30] ? __mutex_lock+0x52a/0xd70 [ 287.074909][ T30] ? fdget_pos+0x24e/0x320 [ 287.079380][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.130143][ T30] ? __fget_files+0x3f3/0x470 [ 287.134928][ T30] fdget_pos+0x24e/0x320 [ 287.139230][ T30] __se_sys_getdents64+0x1a9/0x4a0 [ 287.190253][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.195557][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 287.230240][ T30] ? __pfx_filldir64+0x10/0x10 [ 287.235102][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.280134][ T30] ? do_syscall_64+0x100/0x230 [ 287.285001][ T30] do_syscall_64+0xf3/0x230 [ 287.289593][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.330215][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.336229][ T30] RIP: 0033:0x7fbd14d2ebc9 [ 287.380159][ T30] RSP: 002b:00007fbd14cc4238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 287.388665][ T30] RAX: ffffffffffffffda RBX: 00007fbd14dc06d8 RCX: 00007fbd14d2ebc9 [ 287.450289][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 287.458728][ T30] RBP: 00007fbd14dc06d0 R08: 00007fff24697067 R09: 00007fbd14cc46c0 [ 287.510218][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 287.518282][ T30] R13: 000000000000006e R14: 00007fff24696f80 R15: 00007fff24697068 [ 287.580149][ T30] [ 287.590484][ T30] INFO: task syz-executor856:5254 blocked for more than 144 seconds. [ 287.598622][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 287.670173][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.678924][ T30] task:syz-executor856 state:D stack:28592 pid:5254 tgid:5244 ppid:5237 flags:0x00004006 [ 287.750159][ T30] Call Trace: [ 287.753518][ T30] [ 287.756487][ T30] __schedule+0x1843/0x4ae0 [ 287.790179][ T30] ? __pfx___schedule+0x10/0x10 [ 287.795124][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.830157][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 287.835725][ T30] ? schedule+0x90/0x320 [ 287.840014][ T30] schedule+0x14b/0x320 [ 287.880139][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.885697][ T30] __mutex_lock+0x6a7/0xd70 [ 287.920153][ T30] ? __mutex_lock+0x52a/0xd70 [ 287.924929][ T30] ? fdget_pos+0x24e/0x320 [ 287.929491][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 287.980150][ T30] ? __fget_files+0x3f3/0x470 [ 287.984936][ T30] fdget_pos+0x24e/0x320 [ 287.989232][ T30] __se_sys_getdents64+0x1a9/0x4a0 [ 288.040165][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.045469][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 288.080136][ T30] ? __pfx_filldir64+0x10/0x10 [ 288.084991][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.130161][ T30] ? do_syscall_64+0x100/0x230 [ 288.135016][ T30] do_syscall_64+0xf3/0x230 [ 288.139560][ T30] ? clear_bhb_loop+0x35/0x90 [ 288.180136][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.186129][ T30] RIP: 0033:0x7fbd14d2ebc9 [ 288.220178][ T30] RSP: 002b:00007fbd14cc4238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 288.228689][ T30] RAX: ffffffffffffffda RBX: 00007fbd14dc06d8 RCX: 00007fbd14d2ebc9 [ 288.300133][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 288.308192][ T30] RBP: 00007fbd14dc06d0 R08: 00007fff24697067 R09: 00007fbd14cc46c0 [ 288.350172][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 288.358233][ T30] R13: 000000000000006e R14: 00007fff24696f80 R15: 00007fff24697068 [ 288.430192][ T30] [ 288.433298][ T30] INFO: task syz-executor856:5255 blocked for more than 145 seconds. [ 288.470167][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 288.478048][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.550177][ T30] task:syz-executor856 state:D stack:28976 pid:5255 tgid:5245 ppid:5238 flags:0x00004006 [ 288.590159][ T30] Call Trace: [ 288.593523][ T30] [ 288.596553][ T30] __schedule+0x1843/0x4ae0 [ 288.630191][ T30] ? __pfx___schedule+0x10/0x10 [ 288.635141][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.660162][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 288.665896][ T30] ? schedule+0x90/0x320 [ 288.690166][ T30] schedule+0x14b/0x320 [ 288.694428][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.699942][ T30] __mutex_lock+0x6a7/0xd70 [ 288.730200][ T30] ? __mutex_lock+0x52a/0xd70 [ 288.734965][ T30] ? fdget_pos+0x24e/0x320 [ 288.739437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.790177][ T30] ? __fget_files+0x3f3/0x470 [ 288.794957][ T30] fdget_pos+0x24e/0x320 [ 288.799258][ T30] __se_sys_getdents64+0x1a9/0x4a0 [ 288.840142][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.845446][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 288.870540][ T30] ? __pfx_filldir64+0x10/0x10 [ 288.875394][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.910200][ T30] ? do_syscall_64+0x100/0x230 [ 288.915074][ T30] do_syscall_64+0xf3/0x230 [ 288.919672][ T30] ? clear_bhb_loop+0x35/0x90 [ 288.970164][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.976157][ T30] RIP: 0033:0x7fbd14d2ebc9 [ 289.010162][ T30] RSP: 002b:00007fbd14cc4238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 289.018757][ T30] RAX: ffffffffffffffda RBX: 00007fbd14dc06d8 RCX: 00007fbd14d2ebc9 [ 289.080128][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 289.088187][ T30] RBP: 00007fbd14dc06d0 R08: 00007fbd14cc46c0 R09: 00007fbd14cc46c0 [ 289.140134][ T30] R10: 00007fff24697067 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 289.148190][ T30] R13: 000000000000006e R14: 00007fff24696f80 R15: 00007fff24697068 [ 289.210271][ T30] [ 289.213424][ T30] INFO: task syz-executor856:5257 blocked for more than 145 seconds. [ 289.260137][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 289.267840][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.310156][ T30] task:syz-executor856 state:D stack:29232 pid:5257 tgid:5246 ppid:5240 flags:0x00004006 [ 289.360158][ T30] Call Trace: [ 289.363512][ T30] [ 289.366481][ T30] __schedule+0x1843/0x4ae0 [ 289.410185][ T30] ? __pfx___schedule+0x10/0x10 [ 289.415129][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.450265][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 289.455853][ T30] ? schedule+0x90/0x320 [ 289.490166][ T30] schedule+0x14b/0x320 [ 289.494424][ T30] schedule_preempt_disabled+0x13/0x30 [ 289.499933][ T30] __mutex_lock+0x6a7/0xd70 [ 289.540173][ T30] ? __mutex_lock+0x52a/0xd70 [ 289.544949][ T30] ? fdget_pos+0x24e/0x320 [ 289.549419][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 289.610164][ T30] ? __fget_files+0x3f3/0x470 [ 289.615296][ T30] fdget_pos+0x24e/0x320 [ 289.619600][ T30] __se_sys_getdents64+0x1a9/0x4a0 [ 289.660151][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.665455][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 289.700139][ T30] ? __pfx_filldir64+0x10/0x10 [ 289.705003][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.750180][ T30] ? do_syscall_64+0x100/0x230 [ 289.755044][ T30] do_syscall_64+0xf3/0x230 [ 289.759600][ T30] ? clear_bhb_loop+0x35/0x90 [ 289.810167][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.816262][ T30] RIP: 0033:0x7fbd14d2ebc9 [ 289.850169][ T30] RSP: 002b:00007fbd14cc4238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 289.858677][ T30] RAX: ffffffffffffffda RBX: 00007fbd14dc06d8 RCX: 00007fbd14d2ebc9 [ 289.920141][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 289.928195][ T30] RBP: 00007fbd14dc06d0 R08: 00007fff24697067 R09: 00007fbd14cc46c0 [ 289.990168][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 289.998221][ T30] R13: 000000000000006e R14: 00007fff24696f80 R15: 00007fff24697068 [ 290.040156][ T30] [ 290.043333][ T30] INFO: task syz-executor856:5258 blocked for more than 146 seconds. [ 290.070160][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 290.077867][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.130164][ T30] task:syz-executor856 state:D stack:29232 pid:5258 tgid:5248 ppid:5241 flags:0x00004006 [ 290.170229][ T30] Call Trace: [ 290.173606][ T30] [ 290.176587][ T30] __schedule+0x1843/0x4ae0 [ 290.210183][ T30] ? __pfx___schedule+0x10/0x10 [ 290.215135][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.240144][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 290.245726][ T30] ? schedule+0x90/0x320 [ 290.250027][ T30] schedule+0x14b/0x320 [ 290.280147][ T30] schedule_preempt_disabled+0x13/0x30 [ 290.285735][ T30] __mutex_lock+0x6a7/0xd70 [ 290.320136][ T30] ? __mutex_lock+0x52a/0xd70 [ 290.324902][ T30] ? fdget_pos+0x24e/0x320 [ 290.329369][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 290.360149][ T30] ? __fget_files+0x3f3/0x470 [ 290.364945][ T30] fdget_pos+0x24e/0x320 [ 290.369249][ T30] __se_sys_getdents64+0x1a9/0x4a0 [ 290.420154][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 290.425462][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 290.465476][ T30] ? __pfx_filldir64+0x10/0x10 [ 290.490159][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.496592][ T30] ? do_syscall_64+0x100/0x230 [ 290.540203][ T30] do_syscall_64+0xf3/0x230 [ 290.544895][ T30] ? clear_bhb_loop+0x35/0x90 [ 290.549614][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.590171][ T30] RIP: 0033:0x7fbd14d2ebc9 [ 290.594675][ T30] RSP: 002b:00007fbd14cc4238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 290.640208][ T30] RAX: ffffffffffffffda RBX: 00007fbd14dc06d8 RCX: 00007fbd14d2ebc9 [ 290.648264][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 290.720139][ T30] RBP: 00007fbd14dc06d0 R08: 00007fff24697067 R09: 00007fbd14cc46c0 [ 290.728210][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 290.790209][ T30] R13: 000000000000006e R14: 00007fff24696f80 R15: 00007fff24697068 [ 290.798293][ T30] [ 290.840160][ T30] [ 290.840160][ T30] Showing all locks held in the system: [ 290.847965][ T30] 1 lock held by khungtaskd/30: [ 290.880183][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 290.920136][ T30] 1 lock held by kswapd0/88: [ 290.924804][ T30] 1 lock held by kswapd1/90: [ 290.929454][ T30] 2 locks held by getty/4972: [ 290.970190][ T30] #0: ffff88814ba6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 291.010177][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 291.060140][ T30] 2 locks held by syz-executor856/5250: [ 291.065763][ T30] 1 lock held by syz-executor856/5256: [ 291.110155][ T30] #0: ffff88802af41278 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 291.119352][ T30] 2 locks held by syz-executor856/5247: [ 291.160163][ T30] 1 lock held by syz-executor856/5254: [ 291.165696][ T30] #0: ffff888028828d38 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 291.230156][ T30] 2 locks held by syz-executor856/5251: [ 291.235783][ T30] 1 lock held by syz-executor856/5255: [ 291.280217][ T30] #0: ffff88802d6a90b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 291.289414][ T30] 2 locks held by syz-executor856/5252: [ 291.330161][ T30] 1 lock held by syz-executor856/5257: [ 291.335699][ T30] #0: ffff888011e25278 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 291.390160][ T30] 2 locks held by syz-executor856/5253: [ 291.395787][ T30] 1 lock held by syz-executor856/5258: [ 291.438035][ T30] #0: ffff8880292cd0b8 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24e/0x320 [ 291.470182][ T30] [ 291.472582][ T30] ============================================= [ 291.472582][ T30] [ 291.500191][ T30] NMI backtrace for cpu 1 [ 291.504611][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 291.515251][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.525342][ T30] Call Trace: [ 291.528747][ T30] [ 291.531702][ T30] dump_stack_lvl+0x241/0x360 [ 291.536403][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.541617][ T30] ? __pfx__printk+0x10/0x10 [ 291.546228][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 291.551195][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 291.556668][ T30] ? _printk+0xd5/0x120 [ 291.560850][ T30] ? __pfx__printk+0x10/0x10 [ 291.565449][ T30] ? __wake_up_klogd+0xcc/0x110 [ 291.570316][ T30] ? __pfx__printk+0x10/0x10 [ 291.574914][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 291.579957][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.585967][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 291.591969][ T30] watchdog+0xff4/0x1040 [ 291.596235][ T30] ? watchdog+0x1ea/0x1040 [ 291.600694][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.605412][ T30] kthread+0x2f0/0x390 [ 291.609494][ T30] ? __pfx_watchdog+0x10/0x10 [ 291.614191][ T30] ? __pfx_kthread+0x10/0x10 [ 291.618802][ T30] ret_from_fork+0x4b/0x80 [ 291.623263][ T30] ? __pfx_kthread+0x10/0x10 [ 291.627867][ T30] ret_from_fork_asm+0x1a/0x30 [ 291.632665][ T30] [ 291.635892][ T30] Sending NMI from CPU 1 to CPUs 0: [ 291.641216][ C0] NMI backtrace for cpu 0 [ 291.641230][ C0] CPU: 0 UID: 0 PID: 5250 Comm: syz-executor856 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 291.641251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.641262][ C0] RIP: 0010:check_preemption_disabled+0x37/0x120 [ 291.641288][ C0] Code: 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 5c 92 46 74 65 8b 05 51 92 46 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e [ 291.641308][ C0] RSP: 0018:ffffc9000385f3c8 EFLAGS: 00000002 [ 291.641324][ C0] RAX: b6017c0062072400 RBX: 0000000000000000 RCX: b6017c0062072400 [ 291.641337][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c6028a0 [ 291.641350][ C0] RBP: ffffc9000385f558 R08: ffffffff9429285f R09: 1ffffffff285250b [ 291.641364][ C0] R10: dffffc0000000000 R11: fffffbfff285250c R12: 1ffff9200070be88 [ 291.641377][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 291.641389][ C0] FS: 00007fbd14ce56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 291.641404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.641416][ C0] CR2: 000055b474f5f680 CR3: 000000002bf4c000 CR4: 00000000003526f0 [ 291.641438][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.641448][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.641459][ C0] Call Trace: [ 291.641465][ C0] [ 291.641472][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 291.641494][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 291.641522][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 291.641550][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 291.641574][ C0] ? nmi_handle+0x14f/0x5a0 [ 291.641593][ C0] ? nmi_handle+0x2a/0x5a0 [ 291.641611][ C0] ? check_preemption_disabled+0x37/0x120 [ 291.641629][ C0] ? default_do_nmi+0x63/0x160 [ 291.641651][ C0] ? exc_nmi+0x123/0x1f0 [ 291.641673][ C0] ? end_repeat_nmi+0xf/0x53 [ 291.641694][ C0] ? check_preemption_disabled+0x37/0x120 [ 291.641713][ C0] ? check_preemption_disabled+0x37/0x120 [ 291.641733][ C0] ? check_preemption_disabled+0x37/0x120 [ 291.641752][ C0] [ 291.641757][ C0] [ 291.641765][ C0] lock_acquire+0x1fd/0x550 [ 291.641791][ C0] ? filemap_get_entry+0x123/0x3b0 [ 291.641819][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 291.641848][ C0] ? folio_mark_accessed+0x6f6/0x11b0 [ 291.641868][ C0] ? __filemap_get_folio+0x736/0xbd0 [ 291.641886][ C0] _raw_spin_lock+0x2e/0x40 [ 291.641909][ C0] ? __find_get_block+0x2b1/0x1150 [ 291.641931][ C0] __find_get_block+0x2b1/0x1150 [ 291.641953][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 291.641979][ C0] ? __find_get_block+0x371/0x1150 [ 291.642001][ C0] ? __pfx___find_get_block+0x10/0x10 [ 291.642024][ C0] ? folio_mark_accessed+0x6f6/0x11b0 [ 291.642040][ C0] ? folio_contains+0x22e/0x540 [ 291.642058][ C0] ? __asan_memset+0x23/0x50 [ 291.642080][ C0] ? folio_unlock+0x126/0x2f0 [ 291.642106][ C0] bdev_getblk+0x33/0x550 [ 291.642132][ C0] __bread_gfp+0x86/0x400 [ 291.642155][ C0] get_branch+0x2c3/0x6e0 [ 291.642178][ C0] get_block+0x180/0x16d0 [ 291.642201][ C0] ? create_empty_buffers+0x53e/0x740 [ 291.642225][ C0] ? __pfx_lock_release+0x10/0x10 [ 291.642250][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 291.642272][ C0] ? __pfx_get_block+0x10/0x10 [ 291.642296][ C0] ? zero_user_segments+0x2b4/0x320 [ 291.642315][ C0] block_read_full_folio+0x418/0xcd0 [ 291.642344][ C0] ? __pfx_get_block+0x10/0x10 [ 291.642361][ C0] ? __pfx_block_read_full_folio+0x10/0x10 [ 291.642390][ C0] ? folio_add_lru+0x1cd/0x4f0 [ 291.642408][ C0] filemap_read_folio+0x14b/0x630 [ 291.642433][ C0] ? __pfx_sysv_read_folio+0x10/0x10 [ 291.642452][ C0] ? __pfx_filemap_read_folio+0x10/0x10 [ 291.642474][ C0] do_read_cache_folio+0x3f5/0x850 [ 291.642493][ C0] ? __pfx_sysv_read_folio+0x10/0x10 [ 291.642513][ C0] sysv_readdir+0x193/0x540 [ 291.642533][ C0] ? __fget_files+0x3f3/0x470 [ 291.642560][ C0] iterate_dir+0x571/0x800 [ 291.642584][ C0] __se_sys_getdents64+0x1d3/0x4a0 [ 291.642607][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 291.642634][ C0] ? __pfx___se_sys_getdents64+0x10/0x10 [ 291.642656][ C0] ? __pfx_filldir64+0x10/0x10 [ 291.642680][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.642707][ C0] ? do_syscall_64+0x100/0x230 [ 291.642728][ C0] do_syscall_64+0xf3/0x230 [ 291.642745][ C0] ? clear_bhb_loop+0x35/0x90 [ 291.642762][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.642789][ C0] RIP: 0033:0x7fbd14d2ebc9 [ 291.642804][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 291.642818][ C0] RSP: 002b:00007fbd14ce5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 291.642835][ C0] RAX: ffffffffffffffda RBX: 00007fbd14dc06c8 RCX: 00007fbd14d2ebc9 [ 291.642848][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 291.642858][ C0] RBP: 00007fbd14dc06c0 R08: 00007fbd14ce56c0 R09: 00007fbd14ce56c0 [ 291.642870][ C0] R10: 00007fbd14ce56c0 R11: 0000000000000246 R12: 00007fbd14d830c0 [ 291.642882][ C0] R13: 0000000000000006 R14: 00007fff24696f80 R15: 00007fff24697068 [ 291.642900][ C0] [ 291.642907][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.698 msecs [ 292.620184][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 292.627111][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 292.637674][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.647772][ T30] Call Trace: [ 292.651306][ T30] [ 292.654278][ T30] dump_stack_lvl+0x241/0x360 [ 292.659010][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.664268][ T30] ? __pfx__printk+0x10/0x10 [ 292.668894][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.674928][ T30] ? vscnprintf+0x5d/0x90 [ 292.679390][ T30] panic+0x349/0x880 [ 292.683460][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 292.689665][ T30] ? __pfx_panic+0x10/0x10 [ 292.694115][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 292.699528][ T30] ? __irq_work_queue_local+0x137/0x410 [ 292.705125][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 292.710704][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 292.716899][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 292.723098][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 292.729383][ T30] watchdog+0x1033/0x1040 [ 292.733760][ T30] ? watchdog+0x1ea/0x1040 [ 292.738319][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.743126][ T30] kthread+0x2f0/0x390 [ 292.747330][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.752044][ T30] ? __pfx_kthread+0x10/0x10 [ 292.756670][ T30] ret_from_fork+0x4b/0x80 [ 292.761126][ T30] ? __pfx_kthread+0x10/0x10 [ 292.765747][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.770566][ T30] [ 292.773873][ T30] Kernel Offset: disabled [ 292.778221][ T30] Rebooting in 86400 seconds..