./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2830218555 <...> Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. execve("./syz-executor2830218555", ["./syz-executor2830218555"], 0x7ffc72d48da0 /* 10 vars */) = 0 brk(NULL) = 0x55555b332000 brk(0x55555b332d00) = 0x55555b332d00 arch_prctl(ARCH_SET_FS, 0x55555b332380) = 0 set_tid_address(0x55555b332650) = 5817 set_robust_list(0x55555b332660, 24) = 0 rseq(0x55555b332ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2830218555", 4096) = 28 getrandom("\x81\xd2\x68\x41\x76\xc4\x4c\x5c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555b332d00 brk(0x55555b353d00) = 0x55555b353d00 brk(0x55555b354000) = 0x55555b354000 mprotect(0x7f2225a6a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5819 attached , child_tidptr=0x55555b332650) = 5819 [pid 5819] set_robust_list(0x55555b332660, 24) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5819] write(1, "executing program\n", 18executing program ) = 18 [pid 5819] memfd_create("syzkaller", 0) = 3 [pid 5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f221d400000 [pid 5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5819] munmap(0x7f221d400000, 138412032) = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5819] close(3) = 0 [pid 5819] close(4) = 0 [pid 5819] mkdir("./bus", 0777) = 0 [pid 5819] mount("/dev/loop0", "./bus", "jfs", 0, "") = 0 [ 61.811876][ T5819] loop0: detected capacity change from 0 to 32768 [pid 5819] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5819] chdir("./bus") = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5819] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 [pid 5817] kill(-5819, SIGKILL) = 0 [pid 5817] kill(5819, SIGKILL) = 0 [pid 5817] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5817] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5817] getdents64(3, 0x55555b3336f0 /* 2 entries */, 32768) = 48 [pid 5817] getdents64(3, 0x55555b3336f0 /* 0 entries */, 32768) = 0 [pid 5817] close(3) = 0 [ 81.970540][ T119] cfg80211: failed to load regulatory.db [ 286.768355][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 286.776827][ T30] Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 286.785207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.794128][ T30] task:kworker/u8:1 state:D stack:23120 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 286.804559][ T30] Workqueue: writeback wb_workfn (flush-7:0) [ 286.810811][ T30] Call Trace: [ 286.814109][ T30] [ 286.817141][ T30] __schedule+0x17fb/0x4be0 [ 286.822022][ T30] ? __pfx___schedule+0x10/0x10 [ 286.826905][ T30] ? __blk_flush_plug+0x449/0x500 [ 286.832184][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.837252][ T30] ? kthread_data+0x52/0xd0 [ 286.842060][ T30] ? schedule+0x90/0x320 [ 286.846330][ T30] ? wq_worker_sleeping+0x66/0x240 [ 286.851684][ T30] ? schedule+0x90/0x320 [ 286.855951][ T30] schedule+0x14b/0x320 [ 286.860377][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.865871][ T30] __mutex_lock+0x7e7/0xee0 [ 286.870603][ T30] ? __mutex_lock+0x5ef/0xee0 [ 286.875395][ T30] ? jfs_commit_inode+0x24a/0x590 [ 286.880677][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.885745][ T30] jfs_commit_inode+0x24a/0x590 [ 286.891063][ T30] ? __pfx_jfs_commit_inode+0x10/0x10 [ 286.896472][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.902181][ T30] jfs_write_inode+0x143/0x220 [ 286.906980][ T30] __writeback_single_inode+0x708/0x10d0 [ 286.912877][ T30] writeback_sb_inodes+0x820/0x1360 [ 286.918102][ T30] ? mark_lock+0x2ae/0x360 [ 286.922856][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 286.928735][ T30] ? __pfx___up_read+0x10/0x10 [ 286.933535][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 286.938824][ T30] __writeback_inodes_wb+0x11b/0x260 [ 286.944146][ T30] wb_writeback+0x427/0xb80 [ 286.948981][ T30] ? queue_io+0x3b1/0x5a0 [ 286.953341][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 286.958680][ T30] wb_workfn+0xc4b/0x1080 [ 286.963054][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 286.967842][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.974101][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.980662][ T30] ? process_scheduled_works+0x976/0x1840 [ 286.986410][ T30] process_scheduled_works+0xa66/0x1840 [ 286.992269][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.998502][ T30] ? assign_work+0x364/0x3d0 [ 287.003214][ T30] worker_thread+0x870/0xd30 [ 287.007830][ T30] ? __kthread_parkme+0x169/0x1d0 [ 287.013697][ T30] ? __pfx_worker_thread+0x10/0x10 [ 287.019049][ T30] kthread+0x2f0/0x390 [ 287.023137][ T30] ? __pfx_worker_thread+0x10/0x10 [ 287.028481][ T30] ? __pfx_kthread+0x10/0x10 [ 287.033110][ T30] ret_from_fork+0x4b/0x80 [ 287.037538][ T30] ? __pfx_kthread+0x10/0x10 [ 287.042501][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.047314][ T30] [ 287.053361][ T30] [ 287.053361][ T30] Showing all locks held in the system: [ 287.061480][ T30] 4 locks held by kworker/u8:1/12: [ 287.066627][ T30] #0: ffff8880206ac148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 287.078534][ T30] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 287.091427][ T30] #2: ffff8880354d80e0 (&type->s_umount_key#43){.+.+}-{4:4}, at: super_trylock_shared+0x22/0xf0 [ 287.102238][ T30] #3: ffff8880750a2fe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x24a/0x590 [ 287.112725][ T30] 1 lock held by khungtaskd/30: [ 287.117582][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 287.128288][ T30] 1 lock held by syslogd/5175: [ 287.133071][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 287.143314][ T30] 2 locks held by getty/5578: [ 287.148006][ T30] #0: ffff88814d7170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.158291][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 287.168671][ T30] 4 locks held by syz-executor283/5819: [ 287.174233][ T30] [ 287.176562][ T30] ============================================= [ 287.176562][ T30] [ 287.185319][ T30] NMI backtrace for cpu 1 [ 287.189678][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 287.200212][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.210295][ T30] Call Trace: [ 287.213588][ T30] [ 287.216527][ T30] dump_stack_lvl+0x241/0x360 [ 287.221237][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.226449][ T30] ? __pfx__printk+0x10/0x10 [ 287.231063][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.236020][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.241488][ T30] ? _printk+0xd5/0x120 [ 287.245653][ T30] ? __pfx__printk+0x10/0x10 [ 287.250257][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.255129][ T30] ? __pfx__printk+0x10/0x10 [ 287.259821][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.264856][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.270854][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.276852][ T30] watchdog+0xff6/0x1040 [ 287.281114][ T30] ? watchdog+0x1ea/0x1040 [ 287.285544][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.290229][ T30] kthread+0x2f0/0x390 [ 287.294309][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.298993][ T30] ? __pfx_kthread+0x10/0x10 [ 287.303596][ T30] ret_from_fork+0x4b/0x80 [ 287.308019][ T30] ? __pfx_kthread+0x10/0x10 [ 287.312708][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.317500][ T30] [ 287.320668][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.325907][ C0] NMI backtrace for cpu 0 [ 287.325925][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor283 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 287.325944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.325957][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 287.325979][ C0] Code: 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 80 d4 03 00 65 8b 05 50 5f 64 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 [ 287.325992][ C0] RSP: 0018:ffffc90003cdf038 EFLAGS: 00000293 [ 287.326007][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffff88803090da00 [ 287.326018][ C0] RDX: ffff88803090da00 RSI: 0000000000000000 RDI: 00000000000000ff [ 287.326029][ C0] RBP: ffffc90003cdf230 R08: ffffffff832f5cd0 R09: 0000000000000000 [ 287.326040][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807cdb7000 [ 287.326050][ C0] R13: dffffc0000000000 R14: ffff8880750a3248 R15: 0000000000000000 [ 287.326061][ C0] FS: 000055555b332380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 287.326075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.326086][ C0] CR2: 0000564407628600 CR3: 0000000058e72000 CR4: 00000000003526f0 [ 287.326100][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.326110][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.326120][ C0] Call Trace: [ 287.326126][ C0] [ 287.326133][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.326152][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.326170][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.326194][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.326217][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.326239][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.326255][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.326272][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 287.326288][ C0] ? default_do_nmi+0x63/0x160 [ 287.326306][ C0] ? exc_nmi+0x123/0x1f0 [ 287.326322][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.326340][ C0] ? dtSplitRoot+0x8b0/0x1930 [ 287.326360][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 287.326377][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 287.326394][ C0] ? __sanitizer_cov_trace_const_cmp1+0x18/0x90 [ 287.326410][ C0] [ 287.326415][ C0] [ 287.326420][ C0] dtSplitRoot+0x8b0/0x1930 [ 287.326451][ C0] ? __pfx_dtSplitRoot+0x10/0x10 [ 287.326470][ C0] ? __pfx_dbAlloc+0x10/0x10 [ 287.326487][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 287.326507][ C0] ? __kmalloc_cache_noprof+0x243/0x390 [ 287.326523][ C0] ? dtInsert+0x857/0x6c10 [ 287.326542][ C0] dtInsert+0x12cd/0x6c10 [ 287.326580][ C0] ? __pfx_dtInsert+0x10/0x10 [ 287.326600][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.326616][ C0] ? txLock+0x2b3/0x1cf0 [ 287.326631][ C0] ? __pfx_lock_release+0x10/0x10 [ 287.326646][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 287.326670][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.326690][ C0] ? kfree+0x196/0x430 [ 287.326711][ C0] ? dtSearch+0x1d59/0x2520 [ 287.326745][ C0] jfs_create+0x7ba/0xbb0 [ 287.326769][ C0] ? __pfx_jfs_create+0x10/0x10 [ 287.326789][ C0] ? __pfx_jfs_lookup+0x10/0x10 [ 287.326818][ C0] ? generic_permission+0x2db/0x680 [ 287.326839][ C0] ? bpf_lsm_inode_create+0x9/0x10 [ 287.326857][ C0] ? security_inode_create+0xbe/0x340 [ 287.326879][ C0] ? __pfx_jfs_create+0x10/0x10 [ 287.326899][ C0] path_openat+0x1c03/0x3590 [ 287.326930][ C0] ? __pfx_path_openat+0x10/0x10 [ 287.326956][ C0] do_filp_open+0x27f/0x4e0 [ 287.326975][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 287.326991][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 287.327028][ C0] do_sys_openat2+0x13e/0x1d0 [ 287.327044][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.327060][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.327079][ C0] ? ptrace_notify+0x279/0x380 [ 287.327102][ C0] __x64_sys_creat+0x123/0x170 [ 287.327119][ C0] ? __pfx___x64_sys_creat+0x10/0x10 [ 287.327136][ C0] ? do_syscall_64+0x100/0x230 [ 287.327161][ C0] do_syscall_64+0xf3/0x230 [ 287.327188][ C0] ? clear_bhb_loop+0x35/0x90 [ 287.327204][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.327227][ C0] RIP: 0033:0x7f22259f0a59 [ 287.327299][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.327312][ C0] RSP: 002b:00007ffe57a33228 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 287.327328][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22259f0a59 [ 287.327339][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 287.327349][ C0] RBP: 00007f2225a6a5f0 R08: 00000000000061c0 R09: 000055555b3334c0 [ 287.327359][ C0] R10: 00007ffe57a330f0 R11: 0000000000000246 R12: 00007ffe57a33250 [ 287.327370][ C0] R13: 00007ffe57a33478 R14: 431bde82d7b634db R15: 00007f2225a3903b [ 287.327388][ C0] [ 287.327396][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.489 msecs [ 287.358269][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.358287][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0 [ 287.358309][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.358320][ T30] Call Trace: [ 287.358328][ T30] [ 287.358337][ T30] dump_stack_lvl+0x241/0x360 [ 287.358365][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.358387][ T30] ? __pfx__printk+0x10/0x10 [ 287.358405][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.358430][ T30] ? vscnprintf+0x5d/0x90 [ 287.358452][ T30] panic+0x349/0x880 [ 287.358473][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.358495][ T30] ? __pfx_panic+0x10/0x10 [ 287.358512][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.358537][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.358557][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.358575][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.358595][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.358618][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.358641][ T30] watchdog+0x1035/0x1040 [ 287.358660][ T30] ? watchdog+0x1ea/0x1040 [ 287.358683][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.358701][ T30] kthread+0x2f0/0x390 [ 287.358721][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.358738][ T30] ? __pfx_kthread+0x10/0x10 [ 287.358757][ T30] ret_from_fork+0x4b/0x80 [ 287.358773][ T30] ? __pfx_kthread+0x10/0x10 [ 287.358792][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.358826][ T30] [ 287.968492][ T30] Kernel Offset: disabled [ 287.973511][ T30] Rebooting in 86400 seconds..