./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3929294015 <...> Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. execve("./syz-executor3929294015", ["./syz-executor3929294015"], 0x7fffa1ffe770 /* 10 vars */) = 0 brk(NULL) = 0x55555c6fa000 brk(0x55555c6fad00) = 0x55555c6fad00 arch_prctl(ARCH_SET_FS, 0x55555c6fa380) = 0 set_tid_address(0x55555c6fa650) = 5822 set_robust_list(0x55555c6fa660, 24) = 0 rseq(0x55555c6faca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3929294015", 4096) = 28 getrandom("\xff\x2f\x5d\x7f\xf4\x10\x1b\x6d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555c6fad00 brk(0x55555c71bd00) = 0x55555c71bd00 brk(0x55555c71c000) = 0x55555c71c000 mprotect(0x7fda6eb91000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5823 attached , child_tidptr=0x55555c6fa650) = 5823 [pid 5823] set_robust_list(0x55555c6fa660, 24) = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] getppid() = 0 [pid 5823] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5823] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5823] unshare(CLONE_NEWNS) = 0 [pid 5823] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5823] unshare(CLONE_NEWIPC) = 0 [pid 5823] unshare(CLONE_NEWCGROUP) = 0 [pid 5823] unshare(CLONE_NEWUTS) = 0 [pid 5823] unshare(CLONE_SYSVSEM) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "16777216", 8) = 8 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "536870912", 9) = 9 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1024", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "8192", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1024", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1024", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5823] close(3) = 0 [pid 5823] getpid() = 1 [pid 5823] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x310 [ 81.575566][ T5823] #1: ffff88807bce8148 (&type->i_mutex_dir_key#7){.+.+}-{4:4}, at: iterate_dir+0x4a6/0x760 [ 81.586037][ T5823] #2: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x466/0xbe0 [pid 5823] getdents(4, 0x200000001fc0 /* 4 entries */, 184) = 112 [ 81.596210][ T5823] #3: ffff888033140ba0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 81.606528][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor392 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 81.606555][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.606572][ T5823] Call Trace: [ 81.606579][ T5823] [ 81.606588][ T5823] dump_stack_lvl+0x241/0x360 [ 81.606617][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.606654][ T5823] __might_resched+0x558/0x6c0 [ 81.606688][ T5823] ? down_read_trylock+0xd5/0x3c0 [ 81.606709][ T5823] ? __pfx___might_resched+0x10/0x10 [ 81.606747][ T5823] ? __alloc_frozen_pages_noprof+0x181/0x7b0 [ 81.606778][ T5823] prepare_alloc_pages+0x1cc/0x5c0 [ 81.606809][ T5823] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 81.606839][ T5823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 81.606881][ T5823] alloc_pages_mpol+0x339/0x690 [ 81.606917][ T5823] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 81.606956][ T5823] vma_alloc_folio_noprof+0x12d/0x260 [ 81.606990][ T5823] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 81.607030][ T5823] folio_prealloc+0x2e/0x170 [ 81.607055][ T5823] __handle_mm_fault+0x32e8/0x6ef0 [ 81.607099][ T5823] ? __pfx___handle_mm_fault+0x10/0x10 [ 81.607122][ T5823] ? cgroup_rstat_updated+0x144/0xc40 [ 81.607151][ T5823] ? mtree_range_walk+0x700/0x8e0 [ 81.607188][ T5823] ? mt_find+0x28a/0x8f0 [ 81.607214][ T5823] ? mt_find+0x28a/0x8f0 [ 81.607242][ T5823] ? mt_find+0x699/0x8f0 [ 81.607270][ T5823] ? mt_find+0x28a/0x8f0 [ 81.607319][ T5823] ? __pfx_mt_find+0x10/0x10 [ 81.607362][ T5823] ? find_vma+0xfa/0x170 [ 81.607383][ T5823] ? __pfx_find_vma+0x10/0x10 [ 81.607406][ T5823] handle_mm_fault+0x2c1/0x7e0 [ 81.607436][ T5823] exc_page_fault+0x2bb/0x8b0 [ 81.607467][ T5823] asm_exc_page_fault+0x26/0x30 [ 81.607487][ T5823] RIP: 0010:filldir+0x2c4/0x6a0 [ 81.607517][ T5823] Code: 87 55 02 00 00 0f 01 cb 0f ae e8 48 8b 44 24 30 49 89 46 08 48 8b 4c 24 10 48 8b 44 24 60 48 89 01 48 8b 44 24 18 8b 6c 24 3c <66> 89 41 10 48 98 40 88 6c 01 ff 48 89 44 24 30 4d 63 f5 42 c6 44 [ 81.607533][ T5823] RSP: 0018:ffffc90004127be0 EFLAGS: 00050283 [ 81.607551][ T5823] RAX: 0000000000000020 RBX: 0000200000002010 RCX: 0000200000001ff0 [ 81.607565][ T5823] RDX: 0000000000000000 RSI: 0000200000001fd8 RDI: 0000200000002010 [ 81.607579][ T5823] RBP: 0000000000000004 R08: ffffffff8240768d R09: 1ffff1100fc73b40 [ 81.607593][ T5823] R10: dffffc0000000000 R11: ffffed100fc73b41 R12: ffff888029ddf881 [ 81.607608][ T5823] R13: 0000000000000005 R14: 0000200000001fd8 R15: 00007ffffffff000 [ 81.607627][ T5823] ? filldir+0x28d/0x6a0 [ 81.607670][ T5823] afs_dynroot_readdir+0x814/0xbe0 [ 81.607697][ T5823] ? __pfx___mutex_lock+0x10/0x10 [ 81.607724][ T5823] ? afs_dynroot_readdir+0x466/0xbe0 [ 81.607750][ T5823] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 81.607783][ T5823] iterate_dir+0x5a9/0x760 [ 81.607815][ T5823] __se_sys_getdents+0x1ff/0x4e0 [ 81.607851][ T5823] ? __pfx___se_sys_getdents+0x10/0x10 [ 81.607878][ T5823] ? __pfx_filldir+0x10/0x10 [ 81.607919][ T5823] do_syscall_64+0xf3/0x230 [ 81.607947][ T5823] ? clear_bhb_loop+0x45/0xa0 [ 81.607971][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.607991][ T5823] RIP: 0033:0x7fda6eb1ce59 [ 81.608013][ T5823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.608029][ T5823] RSP: 002b:00007ffda87e9678 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 81.608072][ T5823] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007fda6eb1ce59 [pid 5823] exit_group(1) = ? [ 81.608087][ T5823] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 81.608100][ T5823] RBP: 0030656c69662f2e R08: 0000000000000006 R09: 0000000000000006 [ 81.608112][ T5823] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fda6eb6b91c [ 81.608125][ T5823] R13: 00007fda6eb660c9 R14: 0000000000000001 R15: 0000000000000001 [ 81.608150][ T5823] [pid 5823] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=1, si_utime=0, si_stime=23 /* 0.23 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 82.001818][ T5823] EXT4-fs (loop0): un