./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4229864818 <...> Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. execve("./syz-executor4229864818", ["./syz-executor4229864818"], 0x7ffd5b8c09b0 /* 10 vars */) = 0 brk(NULL) = 0x5555674dd000 brk(0x5555674ddd00) = 0x5555674ddd00 arch_prctl(ARCH_SET_FS, 0x5555674dd380) = 0 set_tid_address(0x5555674dd650) = 5891 set_robust_list(0x5555674dd660, 24) = 0 rseq(0x5555674ddca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4229864818", 4096) = 28 getrandom("\x27\xaf\x32\x51\xf9\xbb\x72\x3a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555674ddd00 brk(0x5555674fed00) = 0x5555674fed00 brk(0x5555674ff000) = 0x5555674ff000 mprotect(0x7f5ee3a3d000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5892 attached [pid 5892] set_robust_list(0x5555674dd660, 24) = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5891] <... clone resumed>, child_tidptr=0x5555674dd650) = 5892 [pid 5892] <... prctl resumed>) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5892] close(3) = 0 executing program [pid 5892] write(1, "executing program\n", 18) = 18 [pid 5892] memfd_create("syzkaller", 0) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5edb400000 [pid 5892] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\xf6\x9d\xbd\x8c\x5d\x46\xbe\xb8\x8e\x92\xc0\xae\x88\xce\xb2\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x41\x00\x00\x00\x00\x00\x00\x00\x42\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432) = 33554432 [pid 5892] munmap(0x7f5edb400000, 138412032) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3) = 0 [pid 5892] close(4) = 0 [pid 5892] mkdir("./file0", 0777) = 0 [ 175.786663][ T5892] loop0: detected capacity change from 0 to 65536 [ 175.832884][ T5892] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 175.866910][ T5892] XFS (loop0): Ending clean mount [ 175.875997][ T5892] XFS (loop0): Quotacheck needed: Please wait. [pid 5892] mount("/dev/loop0", "./file0", "xfs", 0, "grpquota,nolargeio,logbufs=00000000000000000003,,nouuid") = 0 [pid 5892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5892] chdir("./file0") = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 175.900634][ T5892] XFS (loop0): Quotacheck: Done. [pid 5892] lsetxattr("./file1", "trusted.overlay.upper", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65079, 0 [pid 5891] kill(-5892, SIGKILL) = 0 [pid 5891] kill(5892, SIGKILL) = 0 [pid 5891] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5891] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5891] getdents64(3, 0x5555674de6f0 /* 2 entries */, 32768) = 48 [pid 5891] getdents64(3, 0x5555674de6f0 /* 0 entries */, 32768) = 0 [pid 5891] close(3) = 0 [ 402.637001][ T3557] sched: DL replenish lagged too much [ 429.978258][ T31] INFO: task kworker/1:2:1217 blocked for more than 143 seconds. [ 429.986037][ T31] Not tainted 6.16.0-next-20250806-syzkaller #0 [ 429.992979][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.001729][ T31] task:kworker/1:2 state:D stack:25144 pid:1217 tgid:1217 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 430.013959][ T31] Workqueue: xfs-sync/loop0 xfs_log_worker [ 430.019972][ T31] Call Trace: [ 430.023260][ T31] [ 430.026194][ T31] __schedule+0x1798/0x4cc0 [ 430.030788][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.036195][ T31] ? __pfx___schedule+0x10/0x10 [ 430.041227][ T31] ? schedule+0x91/0x360 [ 430.045506][ T31] schedule+0x165/0x360 [ 430.049762][ T31] xlog_grant_head_wait+0x453/0xa20 [ 430.055003][ T31] xlog_grant_head_check+0x286/0x420 [ 430.060390][ T31] xfs_log_reserve+0x2cc/0x780 [ 430.065209][ T31] xfs_trans_alloc+0x29c/0x980 [ 430.070054][ T31] xfs_sync_sb+0x94/0x150 [ 430.074501][ T31] ? __pfx_xfs_sync_sb+0x10/0x10 [ 430.079599][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 430.084850][ T31] xfs_log_worker+0x290/0x470 [ 430.089706][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 430.095469][ T31] process_scheduled_works+0xade/0x17b0 [ 430.101156][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.107179][ T31] worker_thread+0x8a0/0xda0 [ 430.111838][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.118264][ T31] ? __kthread_parkme+0x7b/0x200 [ 430.123253][ T31] kthread+0x70e/0x8a0 [ 430.127345][ T31] ? __pfx_worker_thread+0x10/0x10 [ 430.132556][ T31] ? __pfx_kthread+0x10/0x10 [ 430.137188][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.142469][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.147700][ T31] ? __pfx_kthread+0x10/0x10 [ 430.152368][ T31] ret_from_fork+0x3f9/0x770 [ 430.156994][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.162183][ T31] ? __switch_to_asm+0x39/0x70 [ 430.167006][ T31] ? __switch_to_asm+0x33/0x70 [ 430.171833][ T31] ? __pfx_kthread+0x10/0x10 [ 430.176458][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.181310][ T31] [ 430.184417][ T31] INFO: task syz-executor422:5892 blocked for more than 143 seconds. [ 430.192536][ T31] Not tainted 6.16.0-next-20250806-syzkaller #0 [ 430.199369][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.208174][ T31] task:syz-executor422 state:D stack:23768 pid:5892 tgid:5892 ppid:5891 task_flags:0x440140 flags:0x00004006 [ 430.220178][ T31] Call Trace: [ 430.223461][ T31] [ 430.226401][ T31] __schedule+0x1798/0x4cc0 [ 430.230967][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 430.237528][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.242464][ T31] ? __pfx___schedule+0x10/0x10 [ 430.247361][ T31] ? schedule+0x91/0x360 [ 430.251675][ T31] schedule+0x165/0x360 [ 430.255861][ T31] xlog_grant_head_wait+0x453/0xa20 [ 430.261618][ T31] xlog_grant_head_check+0x286/0x420 [ 430.266957][ T31] xfs_log_reserve+0x2cc/0x780 [ 430.271806][ T31] xfs_trans_alloc+0x29c/0x980 [ 430.276669][ T31] xfs_trans_alloc_inode+0x13c/0x4a0 [ 430.282057][ T31] xfs_attr_set+0x7fa/0x1210 [ 430.286682][ T31] ? __pfx_xfs_attr_set+0x10/0x10 [ 430.291791][ T31] ? up_write+0x1c4/0x420 [ 430.296156][ T31] ? xfs_qm_dqattach+0x276/0x2b0 [ 430.301164][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.305956][ T31] ? xfs_da_hashname+0x59d/0x740 [ 430.310974][ T31] ? xfs_attr_change+0x2ac/0x390 [ 430.315954][ T31] xfs_xattr_set+0x14d/0x250 [ 430.320717][ T31] ? __pfx_xfs_xattr_set+0x10/0x10 [ 430.325884][ T31] ? evm_protect_xattr+0x4d4/0xa90 [ 430.331073][ T31] ? __pfx_evm_protect_xattr+0x10/0x10 [ 430.336585][ T31] ? __pfx_xfs_xattr_set+0x10/0x10 [ 430.341783][ T31] __vfs_setxattr+0x43c/0x480 [ 430.346505][ T31] __vfs_setxattr_noperm+0x12d/0x660 [ 430.351867][ T31] vfs_setxattr+0x16b/0x2f0 [ 430.356416][ T31] ? __pfx_vfs_setxattr+0x10/0x10 [ 430.361506][ T31] ? mnt_get_write_access+0x223/0x2a0 [ 430.366915][ T31] filename_setxattr+0x274/0x600 [ 430.371939][ T31] ? __pfx_filename_setxattr+0x10/0x10 [ 430.377455][ T31] ? getname_flags+0x1e5/0x540 [ 430.382288][ T31] path_setxattrat+0x364/0x3a0 [ 430.387089][ T31] ? __pfx_path_setxattrat+0x10/0x10 [ 430.392505][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.397305][ T31] __x64_sys_lsetxattr+0xbf/0xe0 [ 430.402327][ T31] do_syscall_64+0xfa/0x3b0 [ 430.406880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.412170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.418325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.423023][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.429073][ T31] RIP: 0033:0x7f5ee39bde19 [ 430.433536][ T31] RSP: 002b:00007ffd5e227e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 430.442013][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5ee39bde19 [ 430.450048][ T31] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100 [ 430.458124][ T31] RBP: 00007f5ee3a3d5f0 R08: 0000000000000000 R09: 00005555674de4c0 [ 430.466207][ T31] R10: 000000000000fe37 R11: 0000000000000246 R12: 00007ffd5e227e40 [ 430.474244][ T31] R13: 00007ffd5e228068 R14: 431bde82d7b634db R15: 00007f5ee3a0703b [ 430.482287][ T31] [ 430.485328][ T31] [ 430.485328][ T31] Showing all locks held in the system: [ 430.493096][ T31] 1 lock held by khungtaskd/31: [ 430.498057][ T31] #0: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.507926][ T31] 2 locks held by kworker/1:2/1217: [ 430.513176][ T31] #0: ffff88802f122d48 ((wq_completion)xfs-sync/loop0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 430.524943][ T31] #1: ffffc90003dafbc0 ((work_completion)(&(&log->l_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 430.537687][ T31] 2 locks held by kworker/u8:10/3557: [ 430.543130][ T31] 1 lock held by klogd/5225: [ 430.547738][ T31] 2 locks held by getty/5626: [ 430.552492][ T31] #0: ffff8880331750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.562352][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 430.572548][ T31] 3 locks held by syz-executor422/5892: [ 430.578169][ T31] #0: ffff88807b078428 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 430.587364][ T31] #1: ffff88807e229a70 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0 [ 430.597946][ T31] #2: ffff88807b078618 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc+0x12b/0x980 [ 430.608216][ T31] [ 430.610569][ T31] ============================================= [ 430.610569][ T31] [ 430.619041][ T31] NMI backtrace for cpu 1 [ 430.619070][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) [ 430.619094][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.619107][ T31] Call Trace: [ 430.619118][ T31] [ 430.619128][ T31] dump_stack_lvl+0x189/0x250 [ 430.619160][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.619182][ T31] ? __pfx__printk+0x10/0x10 [ 430.619223][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.619250][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.619275][ T31] ? __pfx__printk+0x10/0x10 [ 430.619308][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.619351][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.619380][ T31] watchdog+0xf60/0xfa0 [ 430.619416][ T31] ? watchdog+0x1e2/0xfa0 [ 430.619453][ T31] kthread+0x70e/0x8a0 [ 430.619484][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.619513][ T31] ? __pfx_kthread+0x10/0x10 [ 430.619542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.619569][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.619596][ T31] ? __pfx_kthread+0x10/0x10 [ 430.619623][ T31] ret_from_fork+0x3f9/0x770 [ 430.619648][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.619677][ T31] ? __switch_to_asm+0x39/0x70 [ 430.619705][ T31] ? __switch_to_asm+0x33/0x70 [ 430.619731][ T31] ? __pfx_kthread+0x10/0x10 [ 430.619759][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.619805][ T31] [ 430.619813][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.766781][ C0] NMI backtrace for cpu 0 [ 430.766800][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) [ 430.766821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.766832][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 430.766861][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 66 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 430.766876][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 430.766892][ C0] RAX: 53899aecc5823d00 RBX: ffffffff81968308 RCX: 53899aecc5823d00 [ 430.766906][ C0] RDX: 0000000000000001 RSI: ffffffff8d996519 RDI: ffffffff8be34400 [ 430.766918][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 430.766930][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2bc30 [ 430.766943][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 430.766955][ C0] FS: 0000000000000000(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 430.766968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.766980][ C0] CR2: 000055e9e43c5168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 430.766996][ C0] Call Trace: [ 430.767005][ C0] [ 430.767012][ C0] default_idle+0x13/0x20 [ 430.767027][ C0] default_idle_call+0x74/0xb0 [ 430.767045][ C0] do_idle+0x1e8/0x510 [ 430.767065][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.767079][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 430.767104][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.767125][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.767152][ C0] cpu_startup_entry+0x44/0x60 [ 430.767168][ C0] rest_init+0x2de/0x300 [ 430.767186][ C0] start_kernel+0x3a9/0x410 [ 430.767216][ C0] x86_64_start_reservations+0x24/0x30 [ 430.767244][ C0] x86_64_start_kernel+0x143/0x1c0 [ 430.767271][ C0] common_startup_64+0x13e/0x147 [ 430.767304][ C0] [ 430.767742][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.767762][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250806-syzkaller #0 PREEMPT(full) [ 430.767791][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.767806][ T31] Call Trace: [ 430.767817][ T31] [ 430.767828][ T31] dump_stack_lvl+0x99/0x250 [ 430.767861][ T31] ? __asan_memcpy+0x40/0x70 [ 430.767891][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.767921][ T31] ? __pfx__printk+0x10/0x10 [ 430.767976][ T31] vpanic+0x281/0x750 [ 430.768009][ T31] ? __pfx_vpanic+0x10/0x10 [ 430.768036][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 430.768071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.768117][ T31] panic+0xb9/0xc0 [ 430.768145][ T31] ? __pfx_panic+0x10/0x10 [ 430.768178][ T31] ? irq_work_queue+0xc3/0x140 [ 430.768218][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 430.768251][ T31] watchdog+0xf9f/0xfa0 [ 430.768292][ T31] ? watchdog+0x1e2/0xfa0 [ 430.768334][ T31] kthread+0x70e/0x8a0 [ 430.768370][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.768412][ T31] ? __pfx_kthread+0x10/0x10 [ 430.768444][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.768475][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.768506][ T31] ? __pfx_kthread+0x10/0x10 [ 430.768538][ T31] ret_from_fork+0x3f9/0x770 [ 430.768569][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.768601][ T31] ? __switch_to_asm+0x39/0x70 [ 430.768632][ T31] ? __switch_to_asm+0x33/0x70 [ 430.768664][ T31] ? __pfx_kthread+0x10/0x10 [ 430.768695][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.768747][ T31] [ 431.120406][ T31] Kernel Offset: disabled [ 431.124734][ T31] Rebooting in 86400 seconds..