./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1237384561 <...> Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. execve("./syz-executor1237384561", ["./syz-executor1237384561"], 0x7ffeb4e5a8a0 /* 10 vars */) = 0 brk(NULL) = 0x555581799000 brk(0x555581799d00) = 0x555581799d00 arch_prctl(ARCH_SET_FS, 0x555581799380) = 0 set_tid_address(0x555581799650) = 5842 set_robust_list(0x555581799660, 24) = 0 rseq(0x555581799ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1237384561", 4096) = 28 getrandom("\x53\x56\x24\x6b\x8a\x9e\x56\xb0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555581799d00 brk(0x5555817bad00) = 0x5555817bad00 brk(0x5555817bb000) = 0x5555817bb000 mprotect(0x7fc88774e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555581799650) = 5843 ./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x555581799660, 24) = 0 [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5843] setpgid(0, 0) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 executing program [pid 5843] write(1, "executing program\n", 18) = 18 [pid 5843] creat("./file0", 000) = 3 [pid 5843] pipe2([4, 5], 0) = 0 [pid 5843] write(5, "\x15\x00\x00\x00\x65\xff\xff\x04\x80\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5843] dup(5) = 6 [pid 5843] write(6, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5843] write(6, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [pid 5843] mount(NULL, "./file0", "9p", MS_NOATIME|MS_POSIXACL, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006") = -1 EIO (Input/output error) [pid 5843] chmod("./file0", 000) = 0 [pid 5843] open("./file0", O_WRONLY) = 7 [pid 5843] openat(AT_FDCWD, "blkio.bfq.io_wait_time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 5843] ftruncate(8, 33554441) = 0 [pid 5843] sendfile(7, 8, NULL, 2147479552) = 33554441 [pid 5843] exit_group(0) = ? [pid 5843] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached , child_tidptr=0x555581799650) = 5845 [pid 5845] set_robust_list(0x555581799660, 24) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5845] setpgid(0, 0) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5845] write(3, "1000", 4) = 4 [pid 5845] close(3) = 0 [pid 5845] write(1, "executing program\n", 18executing program ) = 18 [pid 5845] creat("./file0", 000) = 3 [pid 5845] pipe2([4, 5], 0) = 0 [pid 5845] write(5, "\x15\x00\x00\x00\x65\xff\xff\x04\x80\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5845] dup(5) = 6 [pid 5845] write(6, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5845] write(6, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [pid 5845] mount(NULL, "./file0", "9p", MS_NOATIME|MS_POSIXACL, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006") = 0 [pid 5845] chmod("./file0", 000) = 0 [pid 5845] open("./file0", O_WRONLY) = 7 [pid 5845] openat(AT_FDCWD, "blkio.bfq.io_wait_time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 8 [pid 5845] ftruncate(8, 33554441) = 0 [pid 5845] sendfile(7, 8, NULL, 2147479552 [pid 5842] kill(-5845, SIGKILL) = 0 [pid 5842] kill(5845, SIGKILL) = 0 [pid 5842] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5842] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5842] getdents64(3, 0x55558179a6f0 /* 2 entries */, 32768) = 48 [pid 5842] getdents64(3, 0x55558179a6f0 /* 0 entries */, 32768) = 0 [pid 5842] close(3) = 0 [ 430.063073][ T30] INFO: task kworker/u8:7:1158 blocked for more than 143 seconds. [ 430.071084][ T30] Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 430.078540][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.087278][ T30] task:kworker/u8:7 state:D stack:22288 pid:1158 tgid:1158 ppid:2 flags:0x00004000 [ 430.097637][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 430.104870][ T30] Call Trace: [ 430.108154][ T30] [ 430.111082][ T30] __schedule+0x17fb/0x4be0 [ 430.115663][ T30] ? __pfx___schedule+0x10/0x10 [ 430.120533][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.125619][ T30] ? schedule+0x90/0x320 [ 430.129877][ T30] ? wq_worker_sleeping+0x66/0x240 [ 430.135061][ T30] ? schedule+0x90/0x320 [ 430.139316][ T30] schedule+0x14b/0x320 [ 430.143552][ T30] bit_wait+0x12/0xd0 [ 430.147550][ T30] __wait_on_bit+0xb0/0x2f0 [ 430.152075][ T30] ? __pfx_bit_wait+0x10/0x10 [ 430.156805][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 430.162285][ T30] ? __pfx_bit_wait+0x10/0x10 [ 430.167016][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 430.173048][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 430.178506][ T30] netfs_retry_writes+0x16e/0x19b0 [ 430.183664][ T30] ? __pfx_validate_chain+0x10/0x10 [ 430.188916][ T30] ? stack_trace_save+0x118/0x1d0 [ 430.194184][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 430.199772][ T30] ? lockdep_unlock+0x16a/0x300 [ 430.204692][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 430.210916][ T30] ? process_scheduled_works+0x976/0x1840 [ 430.216714][ T30] process_scheduled_works+0xa66/0x1840 [ 430.222319][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.228371][ T30] ? assign_work+0x364/0x3d0 [ 430.233026][ T30] worker_thread+0x870/0xd30 [ 430.237631][ T30] ? __kthread_parkme+0x169/0x1d0 [ 430.242645][ T30] ? __pfx_worker_thread+0x10/0x10 [ 430.247839][ T30] kthread+0x2f0/0x390 [ 430.251921][ T30] ? __pfx_worker_thread+0x10/0x10 [ 430.257136][ T30] ? __pfx_kthread+0x10/0x10 [ 430.261743][ T30] ret_from_fork+0x4b/0x80 [ 430.266208][ T30] ? __pfx_kthread+0x10/0x10 [ 430.270809][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.275636][ T30] [ 430.278747][ T30] [ 430.278747][ T30] Showing all locks held in the system: [ 430.286532][ T30] 1 lock held by khungtaskd/30: [ 430.291391][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 430.301687][ T30] 2 locks held by kworker/u8:7/1158: [ 430.307016][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 430.318719][ T30] #1: ffffc90003f7fd00 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 430.330563][ T30] 2 locks held by getty/5571: [ 430.335279][ T30] #0: ffff88803600a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.345129][ T30] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 430.355333][ T30] 2 locks held by syz-executor123/5845: [ 430.360890][ T30] #0: ffff888063d52420 (sb_writers#9){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 430.370655][ T30] #1: ffff888077320148 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 430.381970][ T30] [ 430.384322][ T30] ============================================= [ 430.384322][ T30] [ 430.392726][ T30] NMI backtrace for cpu 1 [ 430.397050][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 430.407203][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.417248][ T30] Call Trace: [ 430.420512][ T30] [ 430.423428][ T30] dump_stack_lvl+0x241/0x360 [ 430.428098][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.433281][ T30] ? __pfx__printk+0x10/0x10 [ 430.437861][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.442799][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.448261][ T30] ? _printk+0xd5/0x120 [ 430.452408][ T30] ? __pfx__printk+0x10/0x10 [ 430.457006][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.461840][ T30] ? __pfx__printk+0x10/0x10 [ 430.466418][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.472386][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.478356][ T30] watchdog+0xff6/0x1040 [ 430.482583][ T30] ? watchdog+0x1ea/0x1040 [ 430.486987][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.491667][ T30] kthread+0x2f0/0x390 [ 430.495757][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.500430][ T30] ? __pfx_kthread+0x10/0x10 [ 430.505016][ T30] ret_from_fork+0x4b/0x80 [ 430.509425][ T30] ? __pfx_kthread+0x10/0x10 [ 430.514008][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.518778][ T30] [ 430.521891][ T30] Sending NMI from CPU 1 to CPUs 0: [ 430.527177][ C0] NMI backtrace for cpu 0 [ 430.527195][ C0] CPU: 0 UID: 0 PID: 70 Comm: kworker/u8:4 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 430.527211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.527220][ C0] Workqueue: events_unbound toggle_allocation_gate [ 430.527249][ C0] RIP: 0010:kasan_check_range+0x27/0x290 [ 430.527271][ C0] Code: 90 90 90 66 0f 1f 00 55 41 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f 82 56 02 00 00 48 89 fd <48> c1 ed 2f 81 fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb [ 430.527282][ C0] RSP: 0018:ffffc90001587608 EFLAGS: 00000002 [ 430.527294][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff814d568f [ 430.527304][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9018d4f0 [ 430.527312][ C0] RBP: ffffffff9018d4f0 R08: ffffffff9018d4f8 R09: 1ffffffff1d475c4 [ 430.527323][ C0] R10: dffffc0000000000 R11: fffffbfff1d475c5 R12: 0000000000000000 [ 430.527332][ C0] R13: ffffffff8ea3a7c0 R14: 0000000000000000 R15: 0000000000000000 [ 430.527342][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 430.527353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.527363][ C0] CR2: 00005601119be680 CR3: 000000000e736000 CR4: 00000000003526f0 [ 430.527376][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.527384][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.527393][ C0] Call Trace: [ 430.527398][ C0] [ 430.527404][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 430.527425][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.527442][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.527461][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.527484][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.527503][ C0] ? nmi_handle+0x14f/0x5a0 [ 430.527517][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.527533][ C0] ? kasan_check_range+0x27/0x290 [ 430.527551][ C0] ? default_do_nmi+0x63/0x160 [ 430.527571][ C0] ? exc_nmi+0x123/0x1f0 [ 430.527598][ C0] ? end_repeat_nmi+0xf/0x53 [ 430.527619][ C0] ? trace_tlb_flush+0x2f/0x140 [ 430.527635][ C0] ? kasan_check_range+0x27/0x290 [ 430.527655][ C0] ? kasan_check_range+0x27/0x290 [ 430.527675][ C0] ? kasan_check_range+0x27/0x290 [ 430.527694][ C0] [ 430.527699][ C0] [ 430.527706][ C0] trace_tlb_flush+0x2f/0x140 [ 430.527722][ C0] switch_mm_irqs_off+0x77a/0xa70 [ 430.527739][ C0] ? text_poke_memcpy+0x25/0x30 [ 430.527756][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 430.527772][ C0] ? text_poke_memcpy+0x25/0x30 [ 430.527789][ C0] ? __asan_memcpy+0x40/0x70 [ 430.527806][ C0] __text_poke+0x8f0/0xd30 [ 430.527824][ C0] ? __kmalloc_cache_noprof+0x83/0x390 [ 430.527840][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 430.527857][ C0] ? __pfx___text_poke+0x10/0x10 [ 430.527878][ C0] ? process_scheduled_works+0x976/0x1840 [ 430.527906][ C0] ? __pfx___might_resched+0x10/0x10 [ 430.527920][ C0] ? __pfx___might_resched+0x10/0x10 [ 430.527933][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 430.527955][ C0] ? __kmalloc_cache_noprof+0x83/0x390 [ 430.527970][ C0] text_poke_bp_batch+0x265/0xb30 [ 430.527993][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 430.528011][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 430.528036][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 430.528057][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 430.528078][ C0] ? process_scheduled_works+0x976/0x1840 [ 430.528098][ C0] text_poke_finish+0x30/0x50 [ 430.528114][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 430.528133][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 430.528154][ C0] static_key_disable+0x1a/0x20 [ 430.528171][ C0] toggle_allocation_gate+0x1bf/0x260 [ 430.528190][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 430.528210][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.528231][ C0] process_scheduled_works+0xa66/0x1840 [ 430.528262][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.528285][ C0] ? assign_work+0x364/0x3d0 [ 430.528306][ C0] worker_thread+0x870/0xd30 [ 430.528323][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.528339][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.528355][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.528368][ C0] kthread+0x2f0/0x390 [ 430.528383][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.528396][ C0] ? __pfx_kthread+0x10/0x10 [ 430.528411][ C0] ret_from_fork+0x4b/0x80 [ 430.528424][ C0] ? __pfx_kthread+0x10/0x10 [ 430.528439][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.528465][ C0] [ 430.528477][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.300 msecs [ 430.529185][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.988341][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 430.998483][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 431.008533][ T30] Call Trace: [ 431.011805][ T30] [ 431.014732][ T30] dump_stack_lvl+0x241/0x360 [ 431.019408][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.024602][ T30] ? __pfx__printk+0x10/0x10 [ 431.029189][ T30] ? vscnprintf+0x5d/0x90 [ 431.033520][ T30] panic+0x349/0x880 [ 431.037410][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.043562][ T30] ? __pfx_panic+0x10/0x10 [ 431.047979][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 431.053343][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 431.059494][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 431.065653][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 431.071805][ T30] watchdog+0x1035/0x1040 [ 431.076132][ T30] ? watchdog+0x1ea/0x1040 [ 431.080544][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.085217][ T30] kthread+0x2f0/0x390 [ 431.089279][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.093950][ T30] ? __pfx_kthread+0x10/0x10 [ 431.098536][ T30] ret_from_fork+0x4b/0x80 [ 431.102946][ T30] ? __pfx_kthread+0x10/0x10 [ 431.107530][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.112299][ T30] [ 431.115574][ T30] Kernel Offset: disabled [ 431.119891][ T30] Rebooting in 86400 seconds..