./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2292948959 <...> Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. execve("./syz-executor2292948959", ["./syz-executor2292948959"], 0x7ffd41a26db0 /* 10 vars */) = 0 brk(NULL) = 0x555588012000 brk(0x555588012d00) = 0x555588012d00 arch_prctl(ARCH_SET_FS, 0x555588012380) = 0 set_tid_address(0x555588012650) = 5084 set_robust_list(0x555588012660, 24) = 0 rseq(0x555588012ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2292948959", 4096) = 28 getrandom("\x12\x39\xc0\x13\xb1\xce\xf6\x01", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555588012d00 brk(0x555588033d00) = 0x555588033d00 brk(0x555588034000) = 0x555588034000 mprotect(0x7ff3154ec000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5085 attached , child_tidptr=0x555588012650) = 5085 [pid 5085] set_robust_list(0x555588012660, 24) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] write(1, "executing program\n", 18executing program ) = 18 [pid 5085] memfd_create("syzkaller", 0) = 3 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff30d000000 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5085] munmap(0x7ff30d000000, 138412032) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5085] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5085] close(3) = 0 [pid 5085] close(4) = 0 [pid 5085] mkdir("./bus", 0777) = 0 [ 73.362752][ T5085] loop0: detected capacity change from 0 to 32768 [pid 5085] mount("/dev/loop0", "./bus", "jfs", 0, "") = 0 [pid 5085] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./bus") = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5085] openat(AT_FDCWD, "freezer.state", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 5085] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5084] kill(-5085, SIGKILL) = 0 [pid 5084] kill(5085, SIGKILL) = 0 [pid 5084] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555880136f0 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(3, 0x5555880136f0 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [ 87.045690][ T45] cfg80211: failed to load regulatory.db [ 286.715570][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 286.723521][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 286.732133][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.741234][ T30] task:kworker/u8:3 state:D stack:19720 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 286.751691][ T30] Workqueue: writeback wb_workfn (flush-7:0) [ 286.757954][ T30] Call Trace: [ 286.761260][ T30] [ 286.764215][ T30] __schedule+0x1796/0x49d0 [ 286.769097][ T30] ? __pfx___schedule+0x10/0x10 [ 286.773996][ T30] ? __blk_flush_plug+0x449/0x500 [ 286.779306][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.784368][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 286.790337][ T30] ? kthread_data+0x52/0xd0 [ 286.794885][ T30] ? schedule+0x90/0x320 [ 286.799419][ T30] ? wq_worker_sleeping+0x66/0x240 [ 286.804571][ T30] ? schedule+0x90/0x320 [ 286.809101][ T30] schedule+0x14b/0x320 [ 286.813313][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.819242][ T30] __mutex_lock+0x6a4/0xd70 [ 286.823807][ T30] ? __mutex_lock+0x527/0xd70 [ 286.828810][ T30] ? jfs_commit_inode+0x24a/0x590 [ 286.833888][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.839789][ T30] jfs_commit_inode+0x24a/0x590 [ 286.844692][ T30] ? __pfx_jfs_commit_inode+0x10/0x10 [ 286.850427][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.855853][ T30] jfs_write_inode+0x143/0x220 [ 286.860666][ T30] __writeback_single_inode+0x6b9/0x10b0 [ 286.866615][ T30] writeback_sb_inodes+0x99c/0x1380 [ 286.871904][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 286.877848][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 286.883351][ T30] ? __pfx___up_read+0x10/0x10 [ 286.888415][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 286.893493][ T30] __writeback_inodes_wb+0x11b/0x260 [ 286.899341][ T30] wb_writeback+0x495/0xd40 [ 286.903906][ T30] ? queue_io+0x321/0x5a0 [ 286.908549][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 286.913641][ T30] wb_workfn+0xc58/0x1090 [ 286.918074][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 286.922891][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.929386][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.935967][ T30] ? process_scheduled_works+0x945/0x1830 [ 286.941744][ T30] process_scheduled_works+0xa2c/0x1830 [ 286.947910][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.953956][ T30] ? assign_work+0x364/0x3d0 [ 286.959115][ T30] worker_thread+0x86d/0xd70 [ 286.963776][ T30] ? __kthread_parkme+0x169/0x1d0 [ 286.969131][ T30] ? __pfx_worker_thread+0x10/0x10 [ 286.974292][ T30] kthread+0x2f0/0x390 [ 286.978660][ T30] ? __pfx_worker_thread+0x10/0x10 [ 286.983809][ T30] ? __pfx_kthread+0x10/0x10 [ 286.989026][ T30] ret_from_fork+0x4b/0x80 [ 286.993675][ T30] ? __pfx_kthread+0x10/0x10 [ 286.998591][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.003437][ T30] [ 287.009166][ T30] [ 287.009166][ T30] Showing all locks held in the system: [ 287.017241][ T30] 1 lock held by khungtaskd/30: [ 287.022129][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.032352][ T30] 4 locks held by kworker/u8:3/51: [ 287.037675][ T30] #0: ffff88801aec7148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 287.049185][ T30] #1: ffffc90000bb7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 287.061951][ T30] #2: ffff888023d580e0 (&type->s_umount_key#44){.+.+}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 287.073333][ T30] #3: ffff888077a09d88 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x24a/0x590 [ 287.083930][ T30] 2 locks held by syslogd/4516: [ 287.089017][ T30] 2 locks held by getty/4838: [ 287.093717][ T30] #0: ffff88802b9c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.103795][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.114211][ T30] 4 locks held by syz-executor229/5085: [ 287.119970][ T30] [ 287.122317][ T30] ============================================= [ 287.122317][ T30] [ 287.131033][ T30] NMI backtrace for cpu 0 [ 287.135386][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 287.145316][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.155395][ T30] Call Trace: [ 287.158696][ T30] [ 287.161647][ T30] dump_stack_lvl+0x241/0x360 [ 287.166366][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.171604][ T30] ? __pfx__printk+0x10/0x10 [ 287.176221][ T30] ? vprintk_emit+0x631/0x770 [ 287.180931][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.186018][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.191013][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.196504][ T30] ? _printk+0xd5/0x120 [ 287.200686][ T30] ? __pfx__printk+0x10/0x10 [ 287.205308][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.210198][ T30] ? __pfx__printk+0x10/0x10 [ 287.214816][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.219874][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.225889][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.231999][ T30] watchdog+0xfde/0x1020 [ 287.236276][ T30] ? watchdog+0x1ea/0x1020 [ 287.240725][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.245434][ T30] kthread+0x2f0/0x390 [ 287.249534][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.254236][ T30] ? __pfx_kthread+0x10/0x10 [ 287.258856][ T30] ret_from_fork+0x4b/0x80 [ 287.263320][ T30] ? __pfx_kthread+0x10/0x10 [ 287.267950][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.272761][ T30] [ 287.275961][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.281209][ C1] NMI backtrace for cpu 1 [ 287.281221][ C1] CPU: 1 PID: 5085 Comm: syz-executor229 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 287.281240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.281256][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 287.281279][ C1] Code: 8b 3d bc 5c 44 0c 48 89 de 5b e9 13 06 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 a0 ae 6d 7e f7 c2 00 01 ff 00 [ 287.281294][ C1] RSP: 0018:ffffc90002e2f018 EFLAGS: 00000246 [ 287.281310][ C1] RAX: ffffffff8324493e RBX: ffff888029ae0000 RCX: ffff88802370bc00 [ 287.281324][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ff [ 287.281335][ C1] RBP: ffffc90002e2f210 R08: ffffffff83244910 R09: 0000000000000000 [ 287.281351][ C1] R10: 00300065006c0069 R11: 006605ff00000020 R12: 1ffff1100535c000 [ 287.281364][ C1] R13: dffffc0000000000 R14: ffff888077a09ff0 R15: 0000000000000000 [ 287.281377][ C1] FS: 0000555588012380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 287.281392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.281404][ C1] CR2: 000055ad28513600 CR3: 0000000022d88000 CR4: 00000000003506f0 [ 287.281418][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.281428][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.281439][ C1] Call Trace: [ 287.281446][ C1] [ 287.281453][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.281480][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.281501][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.281527][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.281561][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.281581][ C1] ? nmi_handle+0x14f/0x5a0 [ 287.281607][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.281634][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 287.281652][ C1] ? default_do_nmi+0x63/0x160 [ 287.281678][ C1] ? exc_nmi+0x123/0x1f0 [ 287.281703][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.281728][ C1] ? dtSplitRoot+0x8b0/0x1930 [ 287.281747][ C1] ? dtSplitRoot+0x8de/0x1930 [ 287.281767][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 287.281785][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 287.281805][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 287.281824][ C1] [ 287.281829][ C1] [ 287.281834][ C1] dtSplitRoot+0x8de/0x1930 [ 287.281870][ C1] ? __pfx_dtSplitRoot+0x10/0x10 [ 287.281889][ C1] ? __pfx_dbAlloc+0x10/0x10 [ 287.281916][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 287.281932][ C1] ? dtInsert+0x885/0x6b00 [ 287.281949][ C1] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 287.281975][ C1] dtInsert+0x12fa/0x6b00 [ 287.282014][ C1] ? __pfx_dtInsert+0x10/0x10 [ 287.282036][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.282054][ C1] ? txLock+0x2b5/0x21a0 [ 287.282077][ C1] ? __pfx_lock_release+0x10/0x10 [ 287.282094][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 287.282137][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.282161][ C1] ? dtSearch+0x1d59/0x2520 [ 287.282177][ C1] ? kfree+0x149/0x360 [ 287.282219][ C1] jfs_create+0x7ba/0xb90 [ 287.282245][ C1] ? __pfx_jfs_create+0x10/0x10 [ 287.282265][ C1] ? __pfx_jfs_lookup+0x10/0x10 [ 287.282297][ C1] ? make_vfsuid+0x46/0x90 [ 287.282321][ C1] ? bpf_lsm_inode_create+0x9/0x10 [ 287.282336][ C1] ? security_inode_create+0xc2/0x110 [ 287.282361][ C1] ? __pfx_jfs_create+0x10/0x10 [ 287.282383][ C1] path_openat+0x1425/0x3280 [ 287.282425][ C1] ? __pfx_path_openat+0x10/0x10 [ 287.282461][ C1] do_filp_open+0x235/0x490 [ 287.282488][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 287.282525][ C1] ? _raw_spin_unlock+0x28/0x50 [ 287.282546][ C1] ? alloc_fd+0x5a1/0x640 [ 287.282568][ C1] do_sys_openat2+0x13e/0x1d0 [ 287.282592][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.282614][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 287.282634][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.282656][ C1] ? ptrace_notify+0x279/0x380 [ 287.282683][ C1] __x64_sys_openat+0x247/0x2a0 [ 287.282706][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.282730][ C1] ? do_syscall_64+0x100/0x230 [ 287.282756][ C1] do_syscall_64+0xf3/0x230 [ 287.282777][ C1] ? clear_bhb_loop+0x35/0x90 [ 287.282799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.282820][ C1] RIP: 0033:0x7ff315473a99 [ 287.282839][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.282852][ C1] RSP: 002b:00007ffec98180f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.282868][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff315473a99 [ 287.282880][ C1] RDX: 000000000000275a RSI: 0000000020000100 RDI: 00000000ffffff9c [ 287.282891][ C1] RBP: 00007ff3154ec5f0 R08: 00005555880134c0 R09: 00005555880134c0 [ 287.282902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec9818120 [ 287.282913][ C1] R13: 00007ffec9818348 R14: 431bde82d7b634db R15: 00007ff3154bc03b [ 287.282934][ C1] [ 287.282941][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.732 msecs [ 287.782761][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.789631][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 287.799544][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.809619][ T30] Call Trace: [ 287.812913][ T30] [ 287.815860][ T30] dump_stack_lvl+0x241/0x360 [ 287.820660][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.825887][ T30] ? __pfx__printk+0x10/0x10 [ 287.830495][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.836509][ T30] ? vscnprintf+0x5d/0x90 [ 287.840875][ T30] panic+0x349/0x860 [ 287.844796][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.850985][ T30] ? __pfx_panic+0x10/0x10 [ 287.855426][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.860830][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.866403][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.871795][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.877981][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.884173][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.890365][ T30] watchdog+0x101d/0x1020 [ 287.894721][ T30] ? watchdog+0x1ea/0x1020 [ 287.899164][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.903863][ T30] kthread+0x2f0/0x390 [ 287.907961][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.912667][ T30] ? __pfx_kthread+0x10/0x10 [ 287.917286][ T30] ret_from_fork+0x4b/0x80 [ 287.921736][ T30] ? __pfx_kthread+0x10/0x10 [ 287.926354][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.931166][ T30] [ 287.934474][ T30] Kernel Offset: disabled [ 287.938812][ T30] Rebooting in 86400 seconds..