./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1754516792 <...> [ 97.384628][ T27] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. execve("./syz-executor1754516792", ["./syz-executor1754516792"], 0x7ffe97d79280 /* 10 vars */) = 0 brk(NULL) = 0x5555556c7000 brk(0x5555556c7d00) = 0x5555556c7d00 arch_prctl(ARCH_SET_FS, 0x5555556c7380) = 0 set_tid_address(0x5555556c7650) = 5062 set_robust_list(0x5555556c7660, 24) = 0 rseq(0x5555556c7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1754516792", 4096) = 28 getrandom("\x36\x04\xce\x8d\x68\x7e\x41\x7a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555556c7d00 brk(0x5555556e8d00) = 0x5555556e8d00 brk(0x5555556e9000) = 0x5555556e9000 mprotect(0x7f1b0ceca000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x5555556c7650) = 5063 [pid 5063] set_robust_list(0x5555556c7660, 24) = 0 [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setpgid(0, 0) = 0 [pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1000", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] memfd_create("syzkaller", 0) = 3 [pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1b04a18000 [pid 5063] write(3, "\x60\x1c\x6d\x6b\x64\x6f\x73\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x00\x40\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072) = 131072 [pid 5063] munmap(0x7f1b04a18000, 138412032) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] close(3) = 0 [pid 5063] mkdir("./file0", 0777) = 0 [pid 5063] mount("/dev/loop0", "./file0", "vfat", MS_SILENT|MS_STRICTATIME|MS_LAZYTIME|MS_SUBMOUNT, "nonumtail=0,shortname=mixed,utf8=1,rodir,shortname=win95,shortname=winnt,utf8=0,iocharset=cp775,") = 0 [pid 5063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] chdir("./file0") = 0 [pid 5063] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] close(4) = 0 [ 99.861250][ T5063] loop0: detected capacity change from 0 to 256 [ 99.890565][ T5063] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [pid 5063] mkdirat(AT_FDCWD, "./file0", 000 [pid 5062] kill(-5063, SIGKILL) = 0 [pid 5062] kill(5063, SIGKILL) = 0 [pid 5062] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x5555556c86f0 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, 0x5555556c86f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 286.831867][ T29] INFO: task kworker/u4:11:2872 blocked for more than 143 seconds. [ 286.839976][ T29] Not tainted 6.6.0-rc6-next-20231018-syzkaller #0 [ 286.847114][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.859945][ T29] task:kworker/u4:11 state:D stack:23520 pid:2872 tgid:2872 ppid:2 flags:0x00004000 [ 286.870696][ T29] Workqueue: writeback wb_workfn (flush-7:0) [ 286.877353][ T29] Call Trace: [ 286.880680][ T29] [ 286.884334][ T29] __schedule+0xee4/0x5a10 [ 286.888954][ T29] ? blk_mq_try_issue_list_directly+0x590/0x590 [ 286.895946][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.902806][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.908157][ T29] ? schedule+0x1fa/0x270 [ 286.913113][ T29] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.918581][ T29] ? __mutex_lock+0x964/0x1340 [ 286.923964][ T29] schedule+0xe7/0x270 [ 286.928113][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.934135][ T29] __mutex_lock+0x969/0x1340 [ 286.938794][ T29] ? fat_write_inode+0xfc/0x180 [ 286.944611][ T29] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 286.950245][ T29] ? do_raw_spin_lock+0x12e/0x2b0 [ 286.955907][ T29] ? spin_bug+0x1d0/0x1d0 [ 286.960303][ T29] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 286.967380][ T29] ? fat_write_inode+0xfc/0x180 [ 286.972635][ T29] fat_write_inode+0xfc/0x180 [ 286.977477][ T29] __writeback_single_inode+0xa84/0xe60 [ 286.984223][ T29] ? __mark_inode_dirty+0xd80/0xd80 [ 286.989494][ T29] ? _raw_spin_unlock+0x28/0x40 [ 286.994965][ T29] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 287.001013][ T29] writeback_sb_inodes+0x5a2/0x1090 [ 287.006884][ T29] ? sync_inode_metadata+0xe0/0xe0 [ 287.012439][ T29] ? find_held_lock+0x59/0x110 [ 287.017289][ T29] ? move_expired_inodes+0x59e/0x850 [ 287.023137][ T29] __writeback_inodes_wb+0xff/0x2d0 [ 287.028405][ T29] ? writeback_sb_inodes+0x1090/0x1090 [ 287.034516][ T29] ? queue_io+0x3f8/0x4f0 [ 287.038907][ T29] wb_writeback+0x7fe/0xaa0 [ 287.044021][ T29] ? __writeback_inodes_wb+0x2d0/0x2d0 [ 287.049555][ T29] ? get_nr_dirty_inodes+0x176/0x1e0 [ 287.055568][ T29] wb_workfn+0x86a/0xfd0 [ 287.059889][ T29] ? inode_wait_for_writeback+0x30/0x30 [ 287.066111][ T29] ? lock_sync+0x190/0x190 [ 287.070590][ T29] ? lock_sync+0x190/0x190 [ 287.076121][ T29] process_one_work+0x8a2/0x15e0 [ 287.081176][ T29] ? lock_sync+0x190/0x190 [ 287.086194][ T29] ? init_worker_pool+0x770/0x770 [ 287.091288][ T29] ? assign_work+0x1a0/0x240 [ 287.096509][ T29] worker_thread+0x8b9/0x1290 [ 287.101265][ T29] ? process_one_work+0x15e0/0x15e0 [ 287.107052][ T29] kthread+0x33c/0x440 [ 287.111181][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.116985][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.123003][ T29] ret_from_fork+0x45/0x80 [ 287.127502][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.133875][ T29] ret_from_fork_asm+0x11/0x20 [ 287.138743][ T29] [ 287.142418][ T29] [ 287.142418][ T29] Showing all locks held in the system: [ 287.150162][ T29] 1 lock held by khungtaskd/29: [ 287.155872][ T29] #0: ffffffff8cbacbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.166196][ T29] 4 locks held by kworker/u4:11/2872: [ 287.171600][ T29] #0: ffff888142249d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x15e0 [ 287.183145][ T29] #1: ffffc9000aeffd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7f4/0x15e0 [ 287.195747][ T29] #2: ffff888018e6c0e0 (&type->s_umount_key#45){++++}-{3:3}, at: super_trylock_shared+0x1e/0xf0 [ 287.206799][ T29] #3: ffff88807b4281d0 (&sbi->s_lock){+.+.}-{3:3}, at: fat_write_inode+0xfc/0x180 [ 287.216678][ T29] 2 locks held by getty/4814: [ 287.221394][ T29] #0: ffff88814b6680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.232166][ T29] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 287.242863][ T29] 4 locks held by syz-executor175/5063: [ 287.248470][ T29] [ 287.250820][ T29] ============================================= [ 287.250820][ T29] [ 287.260289][ T29] NMI backtrace for cpu 1 [ 287.264657][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-next-20231018-syzkaller #0 [ 287.274153][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 287.284344][ T29] Call Trace: [ 287.287652][ T29] [ 287.290604][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.295307][ T29] nmi_cpu_backtrace+0x277/0x380 [ 287.300298][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.305568][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.311598][ T29] watchdog+0xf87/0x1210 [ 287.315912][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.322024][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.327330][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.332406][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.338429][ T29] kthread+0x33c/0x440 [ 287.342541][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.347775][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.353461][ T29] ret_from_fork+0x45/0x80 [ 287.357931][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.363610][ T29] ret_from_fork_asm+0x11/0x20 [ 287.368440][ T29] [ 287.371613][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.376889][ C0] NMI backtrace for cpu 0 [ 287.376900][ C0] CPU: 0 PID: 5063 Comm: syz-executor175 Not tainted 6.6.0-rc6-next-20231018-syzkaller #0 [ 287.376927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 287.376940][ C0] RIP: 0010:__lock_acquire+0x5b2/0x5dc0 [ 287.376980][ C0] Code: b8 0a 00 00 41 89 ef 41 83 ef 01 0f 88 79 1f 00 00 49 b8 00 00 00 00 00 fc ff df 49 63 c7 48 8d 04 80 4c 8d a4 c7 e1 0a 00 00 12 41 83 ef 01 49 83 ec 28 41 83 ff ff 0f 84 0c 0b 00 00 4d 8d [ 287.377003][ C0] RSP: 0018:ffffc90003a6f3e0 EFLAGS: 00000002 [ 287.377022][ C0] RAX: 000000000000000a RBX: 0000000000000018 RCX: 0000000000000000 [ 287.377036][ C0] RDX: 1ffff1100f6868c7 RSI: 0000000000000001 RDI: ffff88807b433b80 [ 287.377052][ C0] RBP: 0000000000000003 R08: dffffc0000000000 R09: fffffbfff2344fc8 [ 287.377067][ C0] R10: ffffffff91a27e47 R11: 1ffffffff1976fb9 R12: ffff88807b4346b1 [ 287.377083][ C0] R13: ffff88807b4346b8 R14: ffffffff8cbacbe0 R15: 0000000000000002 [ 287.377099][ C0] FS: 00005555556c7380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.377123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.377140][ C0] CR2: 000055f81ca48600 CR3: 0000000077b86000 CR4: 00000000003506f0 [ 287.377155][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.377170][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.377185][ C0] Call Trace: [ 287.377193][ C0] [ 287.377213][ C0] ? show_regs+0x8f/0xa0 [ 287.377240][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.377268][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.377325][ C0] ? nmi_handle+0x1a6/0x570 [ 287.377356][ C0] ? __lock_acquire+0x5b2/0x5dc0 [ 287.377391][ C0] ? default_do_nmi+0x69/0x160 [ 287.377424][ C0] ? exc_nmi+0x186/0x200 [ 287.377454][ C0] ? end_repeat_nmi+0xf/0x2a [ 287.377498][ C0] ? __lock_acquire+0x5b2/0x5dc0 [ 287.377533][ C0] ? __lock_acquire+0x5b2/0x5dc0 [ 287.377569][ C0] ? __lock_acquire+0x5b2/0x5dc0 [ 287.377604][ C0] [ 287.377610][ C0] [ 287.377626][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.377666][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.377706][ C0] lock_acquire+0x1b2/0x530 [ 287.377740][ C0] ? filemap_get_entry+0xd5/0x460 [ 287.377806][ C0] ? lock_sync+0x190/0x190 [ 287.377841][ C0] ? mark_lock+0x105/0x1950 [ 287.377886][ C0] filemap_get_entry+0xdb/0x460 [ 287.377922][ C0] ? filemap_get_entry+0xd5/0x460 [ 287.377958][ C0] ? __folio_lock_or_retry+0x700/0x700 [ 287.377998][ C0] ? folio_flags+0x71/0x1f0 [ 287.378031][ C0] ? folio_mark_accessed+0x1ff/0xb30 [ 287.378069][ C0] __filemap_get_folio+0x56/0xa90 [ 287.378110][ C0] __find_get_block+0x170/0xc30 [ 287.378151][ C0] ? folio_flags+0x71/0x1f0 [ 287.378182][ C0] __getblk_slow+0x10c/0x6b0 [ 287.378226][ C0] bdev_getblk+0xad/0xc0 [ 287.378265][ C0] fat_mirror_bhs+0x244/0x5d0 [ 287.378314][ C0] fat_alloc_clusters+0xcb2/0xf70 [ 287.378365][ C0] ? fat_ent_write+0x1b0/0x1b0 [ 287.378405][ C0] ? mark_lock+0x105/0x1950 [ 287.378442][ C0] ? print_usage_bug.part.0+0x670/0x670 [ 287.378486][ C0] ? current_time+0x8b/0x280 [ 287.378515][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.378554][ C0] fat_alloc_new_dir+0x107/0xc90 [ 287.378593][ C0] ? ktime_get_coarse_real_ts64+0x1a5/0x200 [ 287.378639][ C0] ? fat_zeroed_cluster.constprop.0+0x810/0x810 [ 287.378689][ C0] ? ktime_get_coarse_real_ts64+0xf0/0x200 [ 287.378726][ C0] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 287.378772][ C0] ? vfat_unlink+0x3e0/0x3e0 [ 287.378795][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.378833][ C0] vfat_mkdir+0x151/0x350 [ 287.378864][ C0] ? vfat_add_entry+0x2f30/0x2f30 [ 287.378889][ C0] ? make_vfsgid+0x108/0x160 [ 287.378923][ C0] ? security_inode_permission+0xd8/0x100 [ 287.378970][ C0] ? inode_permission+0xdd/0x5e0 [ 287.379007][ C0] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 287.379043][ C0] vfs_mkdir+0x577/0x820 [ 287.379067][ C0] do_mkdirat+0x2fd/0x3a0 [ 287.379094][ C0] ? __ia32_sys_mknod+0xb0/0xb0 [ 287.379120][ C0] ? getname_flags.part.0+0x1e2/0x4e0 [ 287.379161][ C0] __x64_sys_mkdirat+0x115/0x170 [ 287.379198][ C0] do_syscall_64+0x3f/0x110 [ 287.379224][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.379254][ C0] RIP: 0033:0x7f1b0ce56b59 [ 287.379271][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.379291][ C0] RSP: 002b:00007ffc6cb671e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 287.379311][ C0] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f1b0ce56b59 [ 287.379326][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000ffffff9c [ 287.379340][ C0] RBP: 00007f1b0ceca5f0 R08: 000000000000024e R09: 00005555556c84c0 [ 287.379354][ C0] R10: 00007ffc6cb670b0 R11: 0000000000000246 R12: 00007ffc6cb67210 [ 287.379368][ C0] R13: 00007ffc6cb67438 R14: 431bde82d7b634db R15: 00007f1b0ce9f03b [ 287.379391][ C0] [ 287.379398][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.510 msecs [ 287.881539][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.888420][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.0-rc6-next-20231018-syzkaller #0 [ 287.897742][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 287.908187][ T29] Call Trace: [ 287.911514][ T29] [ 287.914491][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.919139][ T29] panic+0x6dc/0x790 [ 287.923090][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 287.928252][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.933693][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.938947][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.944395][ T29] ? watchdog+0xd3e/0x1210 [ 287.948853][ T29] ? watchdog+0xd31/0x1210 [ 287.953335][ T29] watchdog+0xd4f/0x1210 [ 287.957656][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.963702][ T29] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.968966][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.974041][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.980069][ T29] kthread+0x33c/0x440 [ 287.984181][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.989420][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.995099][ T29] ret_from_fork+0x45/0x80 [ 287.999565][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.005244][ T29] ret_from_fork_asm+0x11/0x20 [ 288.010172][ T29] [ 288.013521][ T29] Kernel Offset: disabled [ 288.017858][ T29] Rebooting in 86400 seconds..