./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor101955230 <...> Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. execve("./syz-executor101955230", ["./syz-executor101955230"], 0x7ffd1c817570 /* 10 vars */) = 0 brk(NULL) = 0x5555567a1000 brk(0x5555567a1d40) = 0x5555567a1d40 arch_prctl(ARCH_SET_FS, 0x5555567a13c0) = 0 set_tid_address(0x5555567a1690) = 5237 set_robust_list(0x5555567a16a0, 24) = 0 rseq(0x5555567a1ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor101955230", 4096) = 27 getrandom("\x4f\x94\x3b\x1f\x2f\x05\xc0\xe3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555567a1d40 brk(0x5555567c2d40) = 0x5555567c2d40 brk(0x5555567c3000) = 0x5555567c3000 mprotect(0x7f120b304000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5238 attached , child_tidptr=0x5555567a1690) = 5238 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5238] set_robust_list(0x5555567a16a0, 24) = 0 [pid 5238] mkdir("./syzkaller.ekqrgH", 0700./strace-static-x86_64: Process 5239 attached ) = 0 [pid 5237] <... clone resumed>, child_tidptr=0x5555567a1690) = 5239 [pid 5239] set_robust_list(0x5555567a16a0, 24 [pid 5238] chmod("./syzkaller.ekqrgH", 0777 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5238] <... chmod resumed>) = 0 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] mkdir("./syzkaller.vsM8TQ", 0700 [pid 5238] chdir("./syzkaller.ekqrgH"./strace-static-x86_64: Process 5240 attached [pid 5237] <... clone resumed>, child_tidptr=0x5555567a1690) = 5240 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] set_robust_list(0x5555567a16a0, 24 [pid 5238] <... chdir resumed>) = 0 [pid 5239] <... mkdir resumed>) = 0 [pid 5240] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5241 attached [pid 5239] chmod("./syzkaller.vsM8TQ", 0777 [pid 5238] mkdir("./0", 0777 [pid 5237] <... clone resumed>, child_tidptr=0x5555567a1690) = 5241 [pid 5241] set_robust_list(0x5555567a16a0, 24 [pid 5240] mkdir("./syzkaller.pDyKO7", 0700 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] <... chmod resumed>) = 0 [pid 5241] <... set_robust_list resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5238] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5242 attached [pid 5242] set_robust_list(0x5555567a16a0, 24) = 0 [pid 5237] <... clone resumed>, child_tidptr=0x5555567a1690) = 5242 [pid 5241] mkdir("./syzkaller.2A4YlE", 0700 [pid 5240] chmod("./syzkaller.pDyKO7", 0777 [pid 5239] chdir("./syzkaller.vsM8TQ" [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5242] mkdir("./syzkaller.qqjCL5", 0700 [pid 5240] <... chmod resumed>) = 0 [pid 5239] <... chdir resumed>) = 0 [pid 5238] <... openat resumed>) = 3 [pid 5240] chdir("./syzkaller.pDyKO7" [pid 5239] mkdir("./0", 0777 [pid 5241] <... mkdir resumed>) = 0 [pid 5240] <... chdir resumed>) = 0 [pid 5238] ioctl(3, LOOP_CLR_FD [pid 5239] <... mkdir resumed>) = 0 [pid 5242] <... mkdir resumed>) = 0 [pid 5241] chmod("./syzkaller.2A4YlE", 0777 [pid 5240] mkdir("./0", 0777 [pid 5238] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5242] chmod("./syzkaller.qqjCL5", 0777 [pid 5241] <... chmod resumed>) = 0 [pid 5240] <... mkdir resumed>) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5242] <... chmod resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5239] <... openat resumed>) = 3 [pid 5238] close(3 [pid 5241] chdir("./syzkaller.2A4YlE") = 0 [pid 5240] <... openat resumed>) = 3 [pid 5238] <... close resumed>) = 0 [pid 5242] chdir("./syzkaller.qqjCL5" [pid 5241] mkdir("./0", 0777 [pid 5240] ioctl(3, LOOP_CLR_FD [pid 5239] ioctl(3, LOOP_CLR_FD [pid 5238] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] <... chdir resumed>) = 0 [pid 5241] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5243 attached [pid 5242] mkdir("./0", 0777 [pid 5240] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5239] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5239] close(3 [pid 5243] set_robust_list(0x5555567a16a0, 24 [pid 5242] <... mkdir resumed>) = 0 [pid 5239] <... close resumed>) = 0 [pid 5240] close(3 [pid 5239] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5243] <... set_robust_list resumed>) = 0 [pid 5240] <... close resumed>) = 0 [pid 5243] chdir("./0" [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5242] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5242] <... openat resumed>) = 3 [pid 5241] <... openat resumed>) = 3 [pid 5238] <... clone resumed>, child_tidptr=0x5555567a1690) = 5243 [pid 5242] ioctl(3, LOOP_CLR_FD [pid 5241] ioctl(3, LOOP_CLR_FD [pid 5242] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5241] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5245 attached ./strace-static-x86_64: Process 5244 attached [pid 5243] <... chdir resumed>) = 0 [pid 5241] close(3 [pid 5240] <... clone resumed>, child_tidptr=0x5555567a1690) = 5244 [pid 5239] <... clone resumed>, child_tidptr=0x5555567a1690) = 5245 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] set_robust_list(0x5555567a16a0, 24 [pid 5243] <... prctl resumed>) = 0 [pid 5245] set_robust_list(0x5555567a16a0, 24 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5243] setpgid(0, 0 [pid 5242] close(3 [pid 5241] <... close resumed>) = 0 [pid 5245] chdir("./0" [pid 5244] chdir("./0" [pid 5243] <... setpgid resumed>) = 0 [pid 5242] <... close resumed>) = 0 [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... chdir resumed>) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] <... prctl resumed>) = 0 [pid 5244] <... prctl resumed>) = 0 [pid 5242] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5247 attached ./strace-static-x86_64: Process 5248 attached [pid 5245] setpgid(0, 0 [pid 5244] setpgid(0, 0 [pid 5243] <... openat resumed>) = 3 [pid 5245] <... setpgid resumed>) = 0 [pid 5244] <... setpgid resumed>) = 0 [pid 5243] write(3, "1000", 4 [pid 5248] set_robust_list(0x5555567a16a0, 24 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] <... clone resumed>, child_tidptr=0x5555567a1690) = 5247 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5247] set_robust_list(0x5555567a16a0, 24 [pid 5245] <... openat resumed>) = 3 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5243] <... write resumed>) = 4 [pid 5241] <... clone resumed>, child_tidptr=0x5555567a1690) = 5248 [pid 5248] chdir("./0" [pid 5247] <... set_robust_list resumed>) = 0 [pid 5245] write(3, "1000", 4 [pid 5244] <... openat resumed>) = 3 [pid 5243] close(3 [pid 5248] <... chdir resumed>) = 0 [pid 5247] chdir("./0" [pid 5245] <... write resumed>) = 4 [pid 5244] write(3, "1000", 4 [pid 5243] <... close resumed>) = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5247] <... chdir resumed>) = 0 [pid 5245] close(3 [pid 5244] <... write resumed>) = 4 [pid 5243] symlink("/dev/binderfs", "./binderfs" [pid 5248] <... prctl resumed>) = 0 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5245] <... close resumed>) = 0 [pid 5244] close(3 [pid 5248] setpgid(0, 0 [pid 5244] <... close resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5243] <... symlink resumed>) = 0 [pid 5248] <... setpgid resumed>) = 0 [pid 5247] <... prctl resumed>) = 0 [pid 5245] <... symlink resumed>) = 0 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program executing program executing program ) = 3 [pid 5247] setpgid(0, 0 [pid 5244] <... symlink resumed>) = 0 [pid 5243] write(1, "executing program\n", 18 [pid 5247] <... setpgid resumed>) = 0 [pid 5248] write(3, "1000", 4 [pid 5245] write(1, "executing program\n", 18 [pid 5244] write(1, "executing program\n", 18 [pid 5248] <... write resumed>) = 4 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] <... write resumed>) = 18 [pid 5244] <... write resumed>) = 18 [pid 5243] <... write resumed>) = 18 [pid 5248] close(3 [pid 5245] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... close resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5248] symlink("/dev/binderfs", "./binderfs" [pid 5245] rt_sigaction(SIGRT_1, {sa_handler=0x7f120b29efa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f120b290150}, [pid 5248] <... symlink resumed>) = 0 [pid 5245] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5244] rt_sigaction(SIGRT_1, {sa_handler=0x7f120b29efa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f120b290150}, [pid 5245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5244] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5243] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... openat resumed>) = 3 [pid 5243] <... futex resumed>) = 0 [pid 5247] write(3, "1000", 4 [pid 5243] rt_sigaction(SIGRT_1, {sa_handler=0x7f120b29efa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f120b290150}, [pid 5247] <... write resumed>) = 4 [pid 5243] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] close(3 [pid 5243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5247] <... close resumed>) = 0 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5248] write(1, "executing program\n", 18 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] <... mmap resumed>) = 0x7f120b20f000 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f120b20f000 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] mprotect(0x7f120b210000, 131072, PROT_READ|PROT_WRITE [pid 5245] <... mmap resumed>) = 0x7f120b20f000 [pid 5244] mprotect(0x7f120b210000, 131072, PROT_READ|PROT_WRITEexecuting program [pid 5248] <... write resumed>) = 18 [pid 5244] <... mprotect resumed>) = 0 [pid 5248] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] mprotect(0x7f120b210000, 131072, PROT_READ|PROT_WRITE [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5248] <... futex resumed>) = 0 [pid 5245] <... mprotect resumed>) = 0 [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b22f990, parent_tid=0x7f120b22f990, exit_signal=0, stack=0x7f120b20f000, stack_size=0x20300, tls=0x7f120b22f6c0}./strace-static-x86_64: Process 5250 attached [pid 5248] rt_sigaction(SIGRT_1, {sa_handler=0x7f120b29efa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f120b290150}, [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5248] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] <... clone3 resumed> => {parent_tid=[5250]}, 88) = 5250 [pid 5248] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b22f990, parent_tid=0x7f120b22f990, exit_signal=0, stack=0x7f120b20f000, stack_size=0x20300, tls=0x7f120b22f6c0} [pid 5244] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5251 attached [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5250] rseq(0x7f120b22ffe0, 0x20, 0, 0x53053053 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] rseq(0x7f120b22ffe0, 0x20, 0, 0x53053053 [pid 5250] <... rseq resumed>) = 0 [pid 5248] <... mmap resumed>) = 0x7f120b20f000 [pid 5245] <... clone3 resumed> => {parent_tid=[5251]}, 88) = 5251 [pid 5244] <... futex resumed>) = 0 [pid 5251] <... rseq resumed>) = 0 [pid 5250] set_robust_list(0x7f120b22f9a0, 24 [pid 5248] mprotect(0x7f120b210000, 131072, PROT_READ|PROT_WRITE [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5251] set_robust_list(0x7f120b22f9a0, 24 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5248] <... mprotect resumed>) = 0 [pid 5247] <... symlink resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5250] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] write(1, "executing program\n", 18 [pid 5243] <... mprotect resumed>) = 0 executing program [pid 5250] memfd_create("syzkaller", 0 [pid 5248] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5247] <... write resumed>) = 18 [pid 5245] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5251] memfd_create("syzkaller", 0 [pid 5250] <... memfd_create resumed>) = 3 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b22f990, parent_tid=0x7f120b22f990, exit_signal=0, stack=0x7f120b20f000, stack_size=0x20300, tls=0x7f120b22f6c0} [pid 5247] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5247] rt_sigaction(SIGRT_1, {sa_handler=0x7f120b29efa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f120b290150}, NULL, 8) = 0 [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b22f990, parent_tid=0x7f120b22f990, exit_signal=0, stack=0x7f120b20f000, stack_size=0x20300, tls=0x7f120b22f6c0} [pid 5247] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5253 attached ./strace-static-x86_64: Process 5252 attached [pid 5251] <... memfd_create resumed>) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1202e00000 [pid 5248] <... clone3 resumed> => {parent_tid=[5253]}, 88) = 5253 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] <... mmap resumed>) = 0x7f1202e00000 [pid 5252] rseq(0x7f120b22ffe0, 0x20, 0, 0x53053053 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5253] rseq(0x7f120b22ffe0, 0x20, 0, 0x53053053 [pid 5243] <... clone3 resumed> => {parent_tid=[5252]}, 88) = 5252 [pid 5253] <... rseq resumed>) = 0 [pid 5252] <... rseq resumed>) = 0 [pid 5250] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5248] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] set_robust_list(0x7f120b22f9a0, 24 [pid 5252] set_robust_list(0x7f120b22f9a0, 24 [pid 5251] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5247] <... mmap resumed>) = 0x7f120b20f000 [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5252] <... set_robust_list resumed>) = 0 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] mprotect(0x7f120b210000, 131072, PROT_READ|PROT_WRITE [pid 5243] <... futex resumed>) = 0 [pid 5251] <... write resumed>) = 65536 [pid 5251] munmap(0x7f1202e00000, 138412032 [pid 5252] memfd_create("syzkaller", 0 [pid 5251] <... munmap resumed>) = 0 [pid 5247] <... mprotect resumed>) = 0 [pid 5243] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5251] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5253] memfd_create("syzkaller", 0 [pid 5252] <... memfd_create resumed>) = 3 [pid 5250] <... write resumed>) = 65536 [pid 5248] <... futex resumed>) = 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1202e00000 [pid 5247] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5253] <... memfd_create resumed>) = 3 [pid 5251] <... openat resumed>) = 4 [pid 5250] munmap(0x7f1202e00000, 138412032 [pid 5248] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b22f990, parent_tid=0x7f120b22f990, exit_signal=0, stack=0x7f120b20f000, stack_size=0x20300, tls=0x7f120b22f6c0} [pid 5251] ioctl(4, LOOP_SET_FD, 3 [pid 5250] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5254 attached [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5252] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5253] <... mmap resumed>) = 0x7f1202e00000 [pid 5254] rseq(0x7f120b22ffe0, 0x20, 0, 0x53053053) = 0 [pid 5254] set_robust_list(0x7f120b22f9a0, 24) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5247] <... clone3 resumed> => {parent_tid=[5254]}, 88) = 5254 [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] <... ioctl resumed>) = 0 [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5252] <... write resumed>) = 65536 [pid 5251] close(3 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5253] <... write resumed>) = 65536 [pid 5252] munmap(0x7f1202e00000, 138412032 [pid 5251] <... close resumed>) = 0 [pid 5250] <... openat resumed>) = 4 [pid 5247] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5252] <... munmap resumed>) = 0 [pid 5251] close(4 [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5247] <... futex resumed>) = 1 [pid 5254] memfd_create("syzkaller", 0 [pid 5253] munmap(0x7f1202e00000, 138412032 [pid 5252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5251] <... close resumed>) = 0 [pid 5247] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5254] <... memfd_create resumed>) = 3 [pid 5251] mkdir("./file0", 0777 [pid 5254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1202e00000 [pid 5253] <... munmap resumed>) = 0 [pid 5252] <... openat resumed>) = 4 [pid 5251] <... mkdir resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5251] mount("/dev/loop1", "./file0", "sysv", MS_RDONLY|MS_SYNCHRONOUS|MS_STRICTATIME, "" [pid 5254] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536 [pid 5253] <... openat resumed>) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... write resumed>) = 65536 [pid 5250] <... ioctl resumed>) = 0 [pid 5252] <... ioctl resumed>) = 0 [pid 5254] munmap(0x7f1202e00000, 138412032 [pid 5253] <... ioctl resumed>) = 0 [pid 5252] close(3 [pid 5251] <... mount resumed>) = 0 [pid 5250] close(3 [pid 5254] <... munmap resumed>) = 0 [pid 5253] close(3 [pid 5252] <... close resumed>) = 0 [pid 5251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5250] <... close resumed>) = 0 [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5253] <... close resumed>) = 0 [pid 5252] close(4 [pid 5250] close(4 [pid 5252] <... close resumed>) = 0 [pid 5253] close(4 [pid 5252] mkdir("./file0", 0777 [pid 5250] <... close resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5252] <... mkdir resumed>) = 0 [pid 5250] mkdir("./file0", 0777 [pid 5253] mkdir("./file0", 0777 [pid 5254] <... openat resumed>) = 4 [pid 5253] <... mkdir resumed>) = 0 [pid 5252] mount("/dev/loop0", "./file0", "sysv", MS_RDONLY|MS_SYNCHRONOUS|MS_STRICTATIME, "" [pid 5251] <... openat resumed>) = 3 [pid 5250] <... mkdir resumed>) = 0 [pid 5254] ioctl(4, LOOP_SET_FD, 3 [pid 5251] chdir("./file0" [ 141.099428][ T5251] loop1: detected capacity change from 0 to 128 [ 141.110826][ T5250] loop2: detected capacity change from 0 to 128 [ 141.125713][ T5252] loop0: detected capacity change from 0 to 128 [ 141.133812][ T5253] loop3: detected capacity change from 0 to 128 [ 141.135199][ T5251] VFS: Found a Xenix FS (block size = 1024) on device loop1 [pid 5253] mount("/dev/loop3", "./file0", "sysv", MS_RDONLY|MS_SYNCHRONOUS|MS_STRICTATIME, "" [pid 5250] mount("/dev/loop2", "./file0", "sysv", MS_RDONLY|MS_SYNCHRONOUS|MS_STRICTATIME, "" [pid 5251] <... chdir resumed>) = 0 [pid 5254] <... ioctl resumed>) = 0 [pid 5251] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5254] close(3 [pid 5251] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... close resumed>) = 0 [pid 5254] close(4 [pid 5251] <... futex resumed>) = 1 [pid 5254] <... close resumed>) = 0 [pid 5251] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] mkdir("./file0", 0777 [pid 5253] <... mount resumed>) = 0 [pid 5252] <... mount resumed>) = 0 [pid 5250] <... mount resumed>) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5254] <... mkdir resumed>) = 0 [pid 5253] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5252] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5245] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] mount("/dev/loop4", "./file0", "sysv", MS_RDONLY|MS_SYNCHRONOUS|MS_STRICTATIME, "" [pid 5253] <... openat resumed>) = 3 [pid 5252] <... openat resumed>) = 3 [pid 5251] <... futex resumed>) = 0 [pid 5250] <... openat resumed>) = 3 [pid 5245] <... futex resumed>) = 1 [ 141.160788][ T5254] loop4: detected capacity change from 0 to 128 [ 141.168671][ T5252] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 141.168827][ T5253] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 141.178359][ T5250] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 141.201774][ T5254] VFS: Found a Xenix FS (block size = 1024) on device loop4 [pid 5251] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5245] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5250] chdir("./file0" [pid 5253] chdir("./file0" [pid 5250] <... chdir resumed>) = 0 [pid 5253] <... chdir resumed>) = 0 [pid 5252] chdir("./file0" [pid 5250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5254] <... mount resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5252] <... chdir resumed>) = 0 [pid 5250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5254] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5250] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... openat resumed>) = 3 [pid 5253] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5250] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5253] <... futex resumed>) = 1 [pid 5252] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5248] <... futex resumed>) = 0 [pid 5244] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... futex resumed>) = 1 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] <... futex resumed>) = 0 [pid 5248] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5248] <... futex resumed>) = 0 [pid 5248] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5254] chdir("./file0" [pid 5253] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5243] <... futex resumed>) = 0 [pid 5243] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... chdir resumed>) = 0 [pid 5252] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = 1 [pid 5252] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 141.211105][ T5251] syz-executor101: attempt to access beyond end of device [ 141.211105][ T5251] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 141.238591][ T5250] syz-executor101: attempt to access beyond end of device [ 141.238591][ T5250] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [pid 5243] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5248] futex(0x7f120b30a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5248] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7f120b30a6bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5248] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5244] futex(0x7f120b30a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5248] <... mmap resumed>) = 0x7f120b1ee000 [pid 5244] <... futex resumed>) = 0 [pid 5248] mprotect(0x7f120b1ef000, 131072, PROT_READ|PROT_WRITE [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5245] <... mmap resumed>) = 0x7f120b1ee000 [pid 5245] mprotect(0x7f120b1ef000, 131072, PROT_READ|PROT_WRITE [pid 5244] <... mmap resumed>) = 0x7f120b1ee000 [pid 5248] <... mprotect resumed>) = 0 [pid 5245] <... mprotect resumed>) = 0 [pid 5244] mprotect(0x7f120b1ef000, 131072, PROT_READ|PROT_WRITE [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] <... mprotect resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b20e990, parent_tid=0x7f120b20e990, exit_signal=0, stack=0x7f120b1ee000, stack_size=0x20300, tls=0x7f120b20e6c0} [pid 5244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5248] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b20e990, parent_tid=0x7f120b20e990, exit_signal=0, stack=0x7f120b1ee000, stack_size=0x20300, tls=0x7f120b20e6c0} [pid 5254] futex(0x7f120b30a6ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... clone3 resumed> => {parent_tid=[5256]}, 88) = 5256 ./strace-static-x86_64: Process 5257 attached [pid 5248] <... rt_sigprocmask resumed>[], 8) = 0 [ 141.256144][ T5252] syz-executor101: attempt to access beyond end of device [ 141.256144][ T5252] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 141.259727][ T5251] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 141.271170][ T5253] syz-executor101: attempt to access beyond end of device [ 141.271170][ T5253] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 141.300808][ T5250] Buffer I/O error on dev loop2, logical block 3245768, async page read ./strace-static-x86_64: Process 5256 attached [pid 5257] rseq(0x7f120b20efe0, 0x20, 0, 0x53053053 [pid 5248] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b20e990, parent_tid=0x7f120b20e990, exit_signal=0, stack=0x7f120b1ee000, stack_size=0x20300, tls=0x7f120b20e6c0} [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... clone3 resumed> => {parent_tid=[5257]}, 88) = 5257 [pid 5254] <... futex resumed>) = 1 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] futex(0x7f120b30a6b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f120b30a6a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] futex(0x7f120b30a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5247] <... futex resumed>) = 0 [pid 5247] futex(0x7f120b30a6a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 1 [pid 5254] openat(AT_FDCWD, "blkio.bfq.time", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] futex(0x7f120b30a6ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] <... rseq resumed>) = 0 [pid 5256] rseq(0x7f120b20efe0, 0x20, 0, 0x53053053 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5258 attached [ 141.305993][ T5251] syz-executor101: attempt to access beyond end of device [ 141.305993][ T5251] loop1: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 141.312535][ T5254] syz-executor101: attempt to access beyond end of device [ 141.312535][ T5254] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 141.325149][ T5251] Buffer I/O error on dev loop1, logical block 8833403, async page read [ 141.338992][ T5250] syz-executor101: attempt to access beyond end of device [ 141.338992][ T5250] loop2: rw=0, sector=17666806, nr_sectors = 2 limit=128 [pid 5258] rseq(0x7f120b20efe0, 0x20, 0, 0x53053053 [pid 5257] set_robust_list(0x7f120b20e9a0, 24 [pid 5256] <... rseq resumed>) = 0 [pid 5248] <... clone3 resumed> => {parent_tid=[5258]}, 88) = 5258 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5243] futex(0x7f120b30a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... rseq resumed>) = 0 [pid 5258] set_robust_list(0x7f120b20e9a0, 24) = 0 [pid 5258] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5258] futex(0x7f120b30a6b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5257] <... set_robust_list resumed>) = 0 [pid 5256] set_robust_list(0x7f120b20e9a0, 24 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7f120b30a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... futex resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5248] futex(0x7f120b30a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5258] openat(AT_FDCWD, "cpuacct.usage_all", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5248] futex(0x7f120b30a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5257] rt_sigprocmask(SIG_SETMASK, [], [pid 5256] <... set_robust_list resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [ 141.346675][ T5252] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 141.361971][ T5253] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 141.369258][ T5252] syz-executor101: attempt to access beyond end of device [ 141.369258][ T5252] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 141.380140][ T5254] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 141.391474][ T5252] Buffer I/O error on dev loop0, logical block 8833403, async page read [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5256] rt_sigprocmask(SIG_SETMASK, [], [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] futex(0x7f120b30a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] <... mmap resumed>) = 0x7f120b1ee000 [pid 5257] openat(AT_FDCWD, "cpuacct.usage_all", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] futex(0x7f120b30a6bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] mprotect(0x7f120b1ef000, 131072, PROT_READ|PROT_WRITE [pid 5256] openat(AT_FDCWD, "cpuacct.usage_all", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5248] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5247] <... futex resumed>) = 0 [pid 5243] <... mprotect resumed>) = 0 [pid 5243] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f120b1ee000 [pid 5247] mprotect(0x7f120b1ef000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5243] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5247] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b20e990, parent_tid=0x7f120b20e990, exit_signal=0, stack=0x7f120b1ee000, stack_size=0x20300, tls=0x7f120b20e6c0} [pid 5247] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5259 attached [pid 5247] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f120b20e990, parent_tid=0x7f120b20e990, exit_signal=0, stack=0x7f120b1ee000, stack_size=0x20300, tls=0x7f120b20e6c0} [pid 5259] rseq(0x7f120b20efe0, 0x20, 0, 0x53053053 [pid 5243] <... clone3 resumed> => {parent_tid=[5259]}, 88) = 5259 [pid 5259] <... rseq resumed>) = 0 [pid 5247] <... clone3 resumed> => {parent_tid=[5260]}, 88) = 5260 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] set_robust_list(0x7f120b20e9a0, 24 [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5243] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5260 attached [pid 5259] <... set_robust_list resumed>) = 0 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5243] futex(0x7f120b30a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] rseq(0x7f120b20efe0, 0x20, 0, 0x53053053 [pid 5243] <... futex resumed>) = 0 [pid 5260] <... rseq resumed>) = 0 [ 141.400399][ T5253] syz-executor101: attempt to access beyond end of device [ 141.400399][ T5253] loop3: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 141.421822][ T5252] syz-executor101: attempt to access beyond end of device [ 141.421822][ T5252] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 141.423099][ T5250] Buffer I/O error on dev loop2, logical block 8833403, async page read [ 141.437406][ T5252] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 141.446086][ T5251] Buffer I/O error on dev loop1, logical block 13269809, async page read [pid 5260] set_robust_list(0x7f120b20e9a0, 24 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5247] futex(0x7f120b30a6b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7f120b30a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... set_robust_list resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] openat(AT_FDCWD, "cpuacct.usage_all", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5247] futex(0x7f120b30a6bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5260] openat(AT_FDCWD, "cpuacct.usage_all", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5247] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5248] exit_group(0) = ? [pid 5245] exit_group(0) = ? [pid 5243] exit_group(0) = ? [pid 5244] exit_group(0) = ? [pid 5247] exit_group(0) = ? [pid 5239] kill(-5245, SIGKILL) = 0 [pid 5239] kill(5245, SIGKILL) = 0 [pid 5238] kill(-5243, SIGKILL) = 0 [pid 5238] kill(5243, SIGKILL) = 0 [pid 5240] kill(-5244, SIGKILL) = 0 [pid 5240] kill(5244, SIGKILL) = 0 [pid 5241] kill(-5248, SIGKILL [pid 5242] kill(-5247, SIGKILL [pid 5241] <... kill resumed>) = 0 [pid 5242] <... kill resumed>) = 0 [pid 5241] kill(5248, SIGKILL) = 0 [pid 5242] kill(5247, SIGKILL) = 0 [pid 5239] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5239] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5239] getdents64(3, 0x5555567a2730 /* 2 entries */, 32768) = 48 [pid 5240] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5239] getdents64(3, [pid 5240] <... openat resumed>) = 3 [pid 5239] <... getdents64 resumed>0x5555567a2730 /* 0 entries */, 32768) = 0 [pid 5240] newfstatat(3, "", [pid 5239] close(3 [pid 5240] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5239] <... close resumed>) = 0 [pid 5240] getdents64(3, 0x5555567a2730 /* 2 entries */, 32768) = 48 [pid 5240] getdents64(3, 0x5555567a2730 /* 0 entries */, 32768) = 0 [pid 5240] close(3) = 0 [pid 5242] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5242] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5242] getdents64(3, [pid 5241] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5241] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5241] getdents64(3, 0x5555567a2730 /* 2 entries */, 32768) = 48 [pid 5242] <... getdents64 resumed>0x5555567a2730 /* 2 entries */, 32768) = 48 [pid 5241] getdents64(3, 0x5555567a2730 /* 0 entries */, 32768) = 0 [pid 5241] close(3) = 0 [pid 5242] getdents64(3, 0x5555567a2730 /* 0 entries */, 32768) = 0 [pid 5242] close(3) = 0 [pid 5238] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5238] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5238] getdents64(3, 0x5555567a2730 /* 2 entries */, 32768) = 48 [pid 5238] getdents64(3, 0x5555567a2730 /* 0 entries */, 32768) = 0 [pid 5238] close(3) = 0 [ 286.689516][ T30] INFO: task syz-executor101:5259 blocked for more than 143 seconds. [ 286.697824][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 286.748210][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.757034][ T30] task:syz-executor101 state:D stack:27952 pid:5259 tgid:5243 ppid:5238 flags:0x00004006 [ 286.828191][ T30] Call Trace: [ 286.831531][ T30] [ 286.834482][ T30] __schedule+0x1843/0x4ae0 [ 286.868252][ T30] ? __pfx___schedule+0x10/0x10 [ 286.873186][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.898186][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.904247][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.948249][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.953523][ T30] ? schedule+0x90/0x320 [ 286.957793][ T30] schedule+0x14b/0x320 [ 286.998187][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.003726][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 287.038205][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 287.044181][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.088329][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.093439][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 287.138207][ T30] down_write+0x1d7/0x220 [ 287.142603][ T30] ? __pfx_down_write+0x10/0x10 [ 287.147486][ T30] ? sb_end_write+0xe9/0x1c0 [ 287.188205][ T30] path_openat+0x89a/0x3590 [ 287.192806][ T30] ? __pfx_path_openat+0x10/0x10 [ 287.197785][ T30] do_filp_open+0x235/0x490 [ 287.248263][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 287.253374][ T30] ? _raw_spin_unlock+0x28/0x50 [ 287.298183][ T30] ? alloc_fd+0x5a1/0x640 [ 287.302587][ T30] do_sys_openat2+0x13e/0x1d0 [ 287.307295][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.348207][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.353566][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.388206][ T30] ? ptrace_notify+0x279/0x380 [ 287.393050][ T30] __x64_sys_openat+0x247/0x2a0 [ 287.397927][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 287.458192][ T30] ? do_syscall_64+0x100/0x230 [ 287.463029][ T30] do_syscall_64+0xf3/0x230 [ 287.467555][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.498201][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.504250][ T30] RIP: 0033:0x7f120b278b89 [ 287.528242][ T30] RSP: 002b:00007f120b20e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.536723][ T30] RAX: ffffffffffffffda RBX: 00007f120b30a6b8 RCX: 00007f120b278b89 [ 287.588237][ T30] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 287.596268][ T30] RBP: 00007f120b30a6b0 R08: 00007ffe2d83d237 R09: 0000000000000000 [ 287.658635][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 287.666667][ T30] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 287.698195][ T30] [ 287.708557][ T30] INFO: task syz-executor101:5257 blocked for more than 144 seconds. [ 287.716662][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 287.768614][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.777346][ T30] task:syz-executor101 state:D stack:27952 pid:5257 tgid:5244 ppid:5240 flags:0x00004006 [ 287.848196][ T30] Call Trace: [ 287.851533][ T30] [ 287.854485][ T30] __schedule+0x1843/0x4ae0 [ 287.878513][ T30] ? __pfx___schedule+0x10/0x10 [ 287.883439][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.908193][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.914244][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.948186][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 287.953373][ T30] ? schedule+0x90/0x320 [ 287.957643][ T30] schedule+0x14b/0x320 [ 287.998659][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.004190][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 288.048183][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 288.054164][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 288.088187][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 288.093323][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 288.118231][ T30] down_write+0x1d7/0x220 [ 288.122614][ T30] ? __pfx_down_write+0x10/0x10 [ 288.127484][ T30] ? sb_end_write+0xe9/0x1c0 [ 288.168195][ T30] path_openat+0x89a/0x3590 [ 288.172788][ T30] ? __pfx_path_openat+0x10/0x10 [ 288.177769][ T30] do_filp_open+0x235/0x490 [ 288.218650][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 288.223759][ T30] ? _raw_spin_unlock+0x28/0x50 [ 288.248180][ T30] ? alloc_fd+0x5a1/0x640 [ 288.252578][ T30] do_sys_openat2+0x13e/0x1d0 [ 288.257278][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.298240][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 288.303528][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.328958][ T30] ? ptrace_notify+0x279/0x380 [ 288.333803][ T30] __x64_sys_openat+0x247/0x2a0 [ 288.358247][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.363680][ T30] ? do_syscall_64+0x100/0x230 [ 288.388196][ T30] do_syscall_64+0xf3/0x230 [ 288.392762][ T30] ? clear_bhb_loop+0x35/0x90 [ 288.397460][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.458236][ T30] RIP: 0033:0x7f120b278b89 [ 288.462712][ T30] RSP: 002b:00007f120b20e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.508181][ T30] RAX: ffffffffffffffda RBX: 00007f120b30a6b8 RCX: 00007f120b278b89 [ 288.516213][ T30] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 288.548592][ T30] RBP: 00007f120b30a6b0 R08: 00007ffe2d83d237 R09: 0000000000000000 [ 288.556617][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 288.618248][ T30] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 288.626299][ T30] [ 288.648205][ T30] INFO: task syz-executor101:5256 blocked for more than 145 seconds. [ 288.656316][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 288.698175][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.706911][ T30] task:syz-executor101 state:D stack:27952 pid:5256 tgid:5245 ppid:5239 flags:0x00004006 [ 288.758176][ T30] Call Trace: [ 288.761542][ T30] [ 288.764500][ T30] __schedule+0x1843/0x4ae0 [ 288.808211][ T30] ? __pfx___schedule+0x10/0x10 [ 288.813134][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.838230][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.844283][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.878638][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 288.883827][ T30] ? schedule+0x90/0x320 [ 288.888100][ T30] schedule+0x14b/0x320 [ 288.912381][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.917871][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 288.958241][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 288.964220][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 289.008183][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 289.013291][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 289.048183][ T30] down_write+0x1d7/0x220 [ 289.052573][ T30] ? __pfx_down_write+0x10/0x10 [ 289.057448][ T30] ? sb_end_write+0xe9/0x1c0 [ 289.108203][ T30] path_openat+0x89a/0x3590 [ 289.112808][ T30] ? __pfx_path_openat+0x10/0x10 [ 289.117786][ T30] do_filp_open+0x235/0x490 [ 289.148248][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 289.153362][ T30] ? _raw_spin_unlock+0x28/0x50 [ 289.178195][ T30] ? alloc_fd+0x5a1/0x640 [ 289.182605][ T30] do_sys_openat2+0x13e/0x1d0 [ 289.187314][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.228187][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 289.233475][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.258244][ T30] ? ptrace_notify+0x279/0x380 [ 289.263072][ T30] __x64_sys_openat+0x247/0x2a0 [ 289.267946][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.298183][ T30] ? do_syscall_64+0x100/0x230 [ 289.303029][ T30] do_syscall_64+0xf3/0x230 [ 289.307550][ T30] ? clear_bhb_loop+0x35/0x90 [ 289.358178][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.364141][ T30] RIP: 0033:0x7f120b278b89 [ 289.398197][ T30] RSP: 002b:00007f120b20e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.406682][ T30] RAX: ffffffffffffffda RBX: 00007f120b30a6b8 RCX: 00007f120b278b89 [ 289.458197][ T30] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 289.466243][ T30] RBP: 00007f120b30a6b0 R08: 00007ffe2d83d237 R09: 0000000000000000 [ 289.498182][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 289.506233][ T30] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 289.578279][ T30] [ 289.581414][ T30] INFO: task syz-executor101:5260 blocked for more than 146 seconds. [ 289.608212][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 289.615896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.658255][ T30] task:syz-executor101 state:D stack:27536 pid:5260 tgid:5247 ppid:5242 flags:0x00004006 [ 289.698272][ T30] Call Trace: [ 289.701601][ T30] [ 289.704552][ T30] __schedule+0x1843/0x4ae0 [ 289.728245][ T30] ? __pfx___schedule+0x10/0x10 [ 289.733164][ T30] ? __pfx_lock_release+0x10/0x10 [ 289.768192][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 289.774245][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.808192][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 289.813385][ T30] ? schedule+0x90/0x320 [ 289.817654][ T30] schedule+0x14b/0x320 [ 289.848210][ T30] schedule_preempt_disabled+0x13/0x30 [ 289.853744][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 289.898254][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 289.904236][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 289.938254][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 289.943375][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 289.978262][ T30] down_write+0x1d7/0x220 [ 289.982659][ T30] ? __pfx_down_write+0x10/0x10 [ 289.987542][ T30] ? sb_end_write+0xe9/0x1c0 [ 290.018183][ T30] path_openat+0x89a/0x3590 [ 290.022752][ T30] ? __lock_acquire+0x1384/0x2050 [ 290.027824][ T30] ? __pfx_path_openat+0x10/0x10 [ 290.088201][ T30] do_filp_open+0x235/0x490 [ 290.092771][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 290.097838][ T30] ? _raw_spin_unlock+0x28/0x50 [ 290.138253][ T30] ? alloc_fd+0x5a1/0x640 [ 290.142661][ T30] do_sys_openat2+0x13e/0x1d0 [ 290.147368][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.178262][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 290.183619][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 290.218184][ T30] ? ptrace_notify+0x279/0x380 [ 290.223271][ T30] __x64_sys_openat+0x247/0x2a0 [ 290.258182][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.263620][ T30] ? do_syscall_64+0x100/0x230 [ 290.298260][ T30] do_syscall_64+0xf3/0x230 [ 290.302823][ T30] ? clear_bhb_loop+0x35/0x90 [ 290.307525][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.348662][ T30] RIP: 0033:0x7f120b278b89 [ 290.353144][ T30] RSP: 002b:00007f120b20e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.388221][ T30] RAX: ffffffffffffffda RBX: 00007f120b30a6b8 RCX: 00007f120b278b89 [ 290.396250][ T30] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 290.458186][ T30] RBP: 00007f120b30a6b0 R08: 00007ffe2d83d237 R09: 0000000000000000 [ 290.466220][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 290.508447][ T30] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 290.516502][ T30] [ 290.558203][ T30] INFO: task syz-executor101:5258 blocked for more than 147 seconds. [ 290.566319][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 290.618180][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.626908][ T30] task:syz-executor101 state:D stack:27320 pid:5258 tgid:5248 ppid:5241 flags:0x00004006 [ 290.678180][ T30] Call Trace: [ 290.681510][ T30] [ 290.684462][ T30] __schedule+0x1843/0x4ae0 [ 290.718197][ T30] ? __pfx___schedule+0x10/0x10 [ 290.723121][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.748210][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 290.754255][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.778199][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 290.783381][ T30] ? schedule+0x90/0x320 [ 290.787650][ T30] schedule+0x14b/0x320 [ 290.828183][ T30] schedule_preempt_disabled+0x13/0x30 [ 290.833711][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 290.878188][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 290.884158][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 290.918184][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 290.923293][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 290.948197][ T30] down_write+0x1d7/0x220 [ 290.952601][ T30] ? __pfx_down_write+0x10/0x10 [ 290.957474][ T30] ? sb_end_write+0xe9/0x1c0 [ 290.988214][ T30] path_openat+0x89a/0x3590 [ 290.992820][ T30] ? __pfx_path_openat+0x10/0x10 [ 290.997799][ T30] do_filp_open+0x235/0x490 [ 291.038185][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 291.043297][ T30] ? _raw_spin_unlock+0x28/0x50 [ 291.068180][ T30] ? alloc_fd+0x5a1/0x640 [ 291.072582][ T30] do_sys_openat2+0x13e/0x1d0 [ 291.077281][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.118190][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 291.123466][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 291.158181][ T30] ? ptrace_notify+0x279/0x380 [ 291.163016][ T30] __x64_sys_openat+0x247/0x2a0 [ 291.167889][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 291.228196][ T30] ? do_syscall_64+0x100/0x230 [ 291.233034][ T30] do_syscall_64+0xf3/0x230 [ 291.237557][ T30] ? clear_bhb_loop+0x35/0x90 [ 291.268186][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.274154][ T30] RIP: 0033:0x7f120b278b89 [ 291.298611][ T30] RSP: 002b:00007f120b20e218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.307089][ T30] RAX: ffffffffffffffda RBX: 00007f120b30a6b8 RCX: 00007f120b278b89 [ 291.378202][ T30] RDX: 000000000000275a RSI: 0000000020000000 RDI: 00000000ffffff9c [ 291.386277][ T30] RBP: 00007f120b30a6b0 R08: 0000000000000000 R09: 0000000000000000 [ 291.428180][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 291.436221][ T30] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 291.488192][ T30] [ 291.491322][ T30] [ 291.491322][ T30] Showing all locks held in the system: [ 291.528202][ T30] 1 lock held by khungtaskd/30: [ 291.533114][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 291.578192][ T30] 1 lock held by kswapd0/86: [ 291.582866][ T30] 2 locks held by getty/4976: [ 291.587562][ T30] #0: ffff88802e3450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 291.638187][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 291.678216][ T30] 1 lock held by syz-executor101/5252: [ 291.683731][ T30] 1 lock held by syz-executor101/5259: [ 291.708565][ T30] #0: ffff88807203cc00 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x89a/0x3590 [ 291.748194][ T30] 1 lock held by syz-executor101/5250: [ 291.753709][ T30] 1 lock held by syz-executor101/5257: [ 291.788199][ T30] #0: ffff88807203d140 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x89a/0x3590 [ 291.828197][ T30] 2 locks held by syz-executor101/5251: [ 291.833797][ T30] 1 lock held by syz-executor101/5256: [ 291.868189][ T30] #0: ffff88807203c180 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x89a/0x3590 [ 291.908219][ T30] 2 locks held by syz-executor101/5254: [ 291.913832][ T30] 1 lock held by syz-executor101/5260: [ 291.958246][ T30] #0: ffff88807203d680 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x89a/0x3590 [ 291.998263][ T30] 1 lock held by syz-executor101/5253: [ 292.003771][ T30] 1 lock held by syz-executor101/5258: [ 292.038251][ T30] #0: ffff88807203c6c0 (&type->i_mutex_dir_key#6){+.+.}-{3:3}, at: path_openat+0x89a/0x3590 [ 292.078198][ T30] [ 292.080574][ T30] ============================================= [ 292.080574][ T30] [ 292.118194][ T30] NMI backtrace for cpu 1 [ 292.122571][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 292.133100][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.143176][ T30] Call Trace: [ 292.146466][ T30] [ 292.149412][ T30] dump_stack_lvl+0x241/0x360 [ 292.154110][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.159326][ T30] ? __pfx__printk+0x10/0x10 [ 292.163942][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 292.168980][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.174450][ T30] ? _printk+0xd5/0x120 [ 292.178623][ T30] ? __pfx__printk+0x10/0x10 [ 292.183225][ T30] ? __wake_up_klogd+0xcc/0x110 [ 292.188095][ T30] ? __pfx__printk+0x10/0x10 [ 292.192698][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 292.197743][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.203748][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 292.209758][ T30] watchdog+0xff4/0x1040 [ 292.214031][ T30] ? watchdog+0x1ea/0x1040 [ 292.218470][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.223165][ T30] kthread+0x2f0/0x390 [ 292.227244][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.231942][ T30] ? __pfx_kthread+0x10/0x10 [ 292.236546][ T30] ret_from_fork+0x4b/0x80 [ 292.240981][ T30] ? __pfx_kthread+0x10/0x10 [ 292.245583][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.250380][ T30] [ 292.253572][ T30] Sending NMI from CPU 1 to CPUs 0: [ 292.258872][ C0] NMI backtrace for cpu 0 [ 292.258885][ C0] CPU: 0 UID: 0 PID: 5252 Comm: syz-executor101 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 292.258904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.258914][ C0] RIP: 0010:zero_user_segments+0x288/0x320 [ 292.258935][ C0] Code: 40 75 0c e8 ba 1f 74 ff b8 01 00 00 00 eb 1b e8 ae 1f 74 ff 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 13 41 8b 07 <89> ed 48 39 e8 76 20 e8 8c 1f 74 ff ff c5 eb 8b 44 89 f9 80 e1 07 [ 292.258952][ C0] RSP: 0018:ffffc900037ef4f0 EFLAGS: 00000293 [ 292.258966][ C0] RAX: 0000000000000001 RBX: ffffea000850fac0 RCX: ffff888011c20000 [ 292.258978][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.258988][ C0] RBP: 0000000000000000 R08: ffffffff8220c73b R09: 1ffffd40010a1f58 [ 292.258999][ C0] R10: dffffc0000000000 R11: fffff940010a1f59 R12: 1ffffd40010a1f64 [ 292.259011][ C0] R13: 1ffffd40010a1f58 R14: 0000000000000000 R15: ffffea000850fb20 [ 292.259027][ C0] FS: 00007f120b22f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 292.259041][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.259053][ C0] CR2: 0000562e3e0e5600 CR3: 0000000076338000 CR4: 00000000003526f0 [ 292.259066][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.259076][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.259086][ C0] Call Trace: [ 292.259091][ C0] [ 292.259097][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 292.259118][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 292.259142][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 292.259161][ C0] ? nmi_handle+0x2a/0x5a0 [ 292.259183][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 292.259204][ C0] ? nmi_handle+0x14f/0x5a0 [ 292.259220][ C0] ? nmi_handle+0x2a/0x5a0 [ 292.259236][ C0] ? zero_user_segments+0x288/0x320 [ 292.259250][ C0] ? default_do_nmi+0x63/0x160 [ 292.259270][ C0] ? exc_nmi+0x123/0x1f0 [ 292.259289][ C0] ? end_repeat_nmi+0xf/0x53 [ 292.259306][ C0] ? zero_user_segments+0x25b/0x320 [ 292.259321][ C0] ? zero_user_segments+0x288/0x320 [ 292.259336][ C0] ? zero_user_segments+0x288/0x320 [ 292.259352][ C0] ? zero_user_segments+0x288/0x320 [ 292.259367][ C0] [ 292.259372][ C0] [ 292.259380][ C0] block_read_full_folio+0x53a/0xcd0 [ 292.259407][ C0] ? __pfx_get_block+0x10/0x10 [ 292.259481][ C0] ? __pfx_block_read_full_folio+0x10/0x10 [ 292.259507][ C0] ? folio_add_lru+0x1cd/0x4f0 [ 292.259524][ C0] filemap_read_folio+0x14b/0x630 [ 292.259541][ C0] ? __pfx_sysv_read_folio+0x10/0x10 [ 292.259557][ C0] ? __pfx_filemap_read_folio+0x10/0x10 [ 292.259578][ C0] do_read_cache_folio+0x3f5/0x850 [ 292.259595][ C0] ? __pfx_sysv_read_folio+0x10/0x10 [ 292.259613][ C0] sysv_find_entry+0x16a/0x4b0 [ 292.259634][ C0] sysv_inode_by_name+0x98/0x2a0 [ 292.259651][ C0] ? __pfx_sysv_inode_by_name+0x10/0x10 [ 292.259673][ C0] sysv_lookup+0x6b/0xe0 [ 292.259689][ C0] ? __pfx_sysv_lookup+0x10/0x10 [ 292.259707][ C0] path_openat+0x11a7/0x3590 [ 292.259739][ C0] ? __pfx_path_openat+0x10/0x10 [ 292.259765][ C0] do_filp_open+0x235/0x490 [ 292.259784][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 292.259812][ C0] ? _raw_spin_unlock+0x28/0x50 [ 292.259833][ C0] ? alloc_fd+0x5a1/0x640 [ 292.259857][ C0] do_sys_openat2+0x13e/0x1d0 [ 292.259874][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.259890][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 292.259913][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 292.259933][ C0] ? ptrace_notify+0x279/0x380 [ 292.259954][ C0] __x64_sys_openat+0x247/0x2a0 [ 292.259970][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.259995][ C0] ? do_syscall_64+0x100/0x230 [ 292.260014][ C0] do_syscall_64+0xf3/0x230 [ 292.260033][ C0] ? clear_bhb_loop+0x35/0x90 [ 292.260049][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.260072][ C0] RIP: 0033:0x7f120b278b89 [ 292.260086][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 292.260098][ C0] RSP: 002b:00007f120b22f218 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.260114][ C0] RAX: ffffffffffffffda RBX: 00007f120b30a6a8 RCX: 00007f120b278b89 [ 292.260125][ C0] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 292.260136][ C0] RBP: 00007f120b30a6a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.260146][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f120b2cd0c0 [ 292.260156][ C0] R13: 0030656c69662f2e R14: 00656d69742e7166 R15: 66622e6f696b6c62 [ 292.260175][ C0] [ 292.260181][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.313 msecs [ 292.828226][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 292.835134][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 292.845652][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.855812][ T30] Call Trace: [ 292.859102][ T30] [ 292.862043][ T30] dump_stack_lvl+0x241/0x360 [ 292.866738][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.871950][ T30] ? __pfx__printk+0x10/0x10 [ 292.876548][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.882559][ T30] ? vscnprintf+0x5d/0x90 [ 292.886963][ T30] panic+0x349/0x880 [ 292.890879][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 292.897055][ T30] ? __pfx_panic+0x10/0x10 [ 292.901482][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 292.906867][ T30] ? __irq_work_queue_local+0x137/0x410 [ 292.912435][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 292.917821][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 292.924055][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 292.930240][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 292.936515][ T30] watchdog+0x1033/0x1040 [ 292.940878][ T30] ? watchdog+0x1ea/0x1040 [ 292.945321][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.950110][ T30] kthread+0x2f0/0x390 [ 292.954196][ T30] ? __pfx_watchdog+0x10/0x10 [ 292.958893][ T30] ? __pfx_kthread+0x10/0x10 [ 292.963499][ T30] ret_from_fork+0x4b/0x80 [ 292.967933][ T30] ? __pfx_kthread+0x10/0x10 [ 292.972535][ T30] ret_from_fork_asm+0x1a/0x30 [ 292.977334][ T30] [ 292.980503][ T30] Kernel Offset: disabled [ 292.984864][ T30] Rebooting in 86400 seconds..