./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3228539526 <...> Warning: Permanently added '10.128.1.119' (ED25519) to the list of known hosts. execve("./syz-executor3228539526", ["./syz-executor3228539526"], 0x7ffd0b660260 /* 10 vars */) = 0 brk(NULL) = 0x555555fdd000 brk(0x555555fddd00) = 0x555555fddd00 arch_prctl(ARCH_SET_FS, 0x555555fdd380) = 0 set_tid_address(0x555555fdd650) = 5033 set_robust_list(0x555555fdd660, 24) = 0 rseq(0x555555fddca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3228539526", 4096) = 28 getrandom("\x89\x62\x77\x63\x0d\x09\xd9\x81", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555fddd00 brk(0x555555ffed00) = 0x555555ffed00 brk(0x555555fff000) = 0x555555fff000 mprotect(0x7f26728eb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5034 attached , child_tidptr=0x555555fdd650) = 5034 [pid 5034] set_robust_list(0x555555fdd660, 24) = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] memfd_create("syzkaller", 0) = 3 [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f266a435000 [ 43.708039][ T5034] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5034 'syz-executor322' [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5034] munmap(0x7f266a435000, 16777216) = 0 [pid 5034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5034] close(3) = 0 [pid 5034] mkdir("./file0", 0777) = 0 [ 43.834740][ T5034] loop0: detected capacity change from 0 to 32768 [ 43.843638][ T5034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor322 (5034) [ 43.858745][ T5034] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 43.867599][ T5034] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [pid 5034] mount("/dev/loop0", "./file0", "btrfs", MS_NOSUID|MS_NODEV|MS_SYNCHRONOUS, "noinode_cache,") = 0 [pid 5034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5034] chdir("./file0") = 0 [pid 5034] ioctl(4, LOOP_CLR_FD) = 0 [pid 5034] close(4) = 0 [pid 5034] openat(AT_FDCWD, "blkio.throttle.io_service_bytes_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 5034] mmap(0x20000000, 12288, PROT_WRITE|PROT_EXEC|PROT_GROWSUP, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000 [pid 5034] ftruncate(4, 32769) = 0 [ 43.878724][ T5034] BTRFS info (device loop0): using free space tree [ 43.892123][ T5034] BTRFS info (device loop0): enabling ssd optimizations [ 43.899501][ T5034] BTRFS info (device loop0): auto enabling async discard [pid 5034] ioctl(4, FS_IOC_FIEMAP, 0x200000c0 [pid 5033] kill(-5034, SIGKILL) = 0 [pid 5033] kill(5034, SIGKILL) = 0 [pid 5033] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5033] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5033] getdents64(3, 0x555555fde6f0 /* 2 entries */, 32768) = 48 [pid 5033] getdents64(3, 0x555555fde6f0 /* 0 entries */, 32768) = 0 [pid 5033] close(3) = 0 [ 76.692983][ T924] cfg80211: failed to load regulatory.db [ 286.612777][ T28] INFO: task syz-executor322:5034 blocked for more than 143 seconds. [ 286.620864][ T28] Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 286.628070][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.636816][ T28] task:syz-executor322 state:D stack:25920 pid:5034 ppid:5033 flags:0x00004006 [ 286.646074][ T28] Call Trace: [ 286.649372][ T28] [ 286.652308][ T28] __schedule+0xee1/0x59f0 [ 286.656884][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.662265][ T28] ? rcu_is_watching+0x12/0xb0 [ 286.667168][ T28] ? wait_extent_bit+0x573/0x670 [ 286.672176][ T28] ? _raw_spin_lock_irqsave+0x42/0x50 [ 286.677608][ T28] schedule+0xe7/0x1b0 [ 286.681696][ T28] wait_extent_bit+0x578/0x670 [ 286.686516][ T28] ? __clear_extent_bit+0xc60/0xc60 [ 286.691734][ T28] ? __set_extent_bit+0x4ed/0x1530 [ 286.696895][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [ 286.702850][ T28] lock_extent+0x104/0x190 [ 286.707266][ T28] ? try_lock_extent+0x130/0x130 [ 286.712194][ T28] ? down_write+0x200/0x200 [ 286.716725][ T28] ? preempt_count_sub+0x150/0x150 [ 286.721865][ T28] ? folio_flags.constprop.0+0x56/0x150 [ 286.727499][ T28] btrfs_page_mkwrite+0x653/0x11e0 [ 286.732655][ T28] ? btrfs_dio_write+0xe0/0xe0 [ 286.737413][ T28] ? rcu_read_unlock+0x1a/0xc0 [ 286.742190][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.747616][ T28] ? __pte_alloc_kernel+0x110/0x110 [ 286.752882][ T28] do_page_mkwrite+0x17a/0x380 [ 286.757703][ T28] do_wp_page+0xd04/0x3550 [ 286.762117][ T28] ? lock_acquire+0x464/0x510 [ 286.766850][ T28] ? lock_sync+0x190/0x190 [ 286.771285][ T28] ? finish_mkwrite_fault+0x300/0x300 [ 286.776713][ T28] ? do_raw_spin_lock+0x12e/0x2b0 [ 286.781759][ T28] ? spin_bug+0x1d0/0x1d0 [ 286.786165][ T28] __handle_mm_fault+0x1704/0x4030 [ 286.791302][ T28] ? vm_iomap_memory+0x170/0x170 [ 286.796285][ T28] ? find_vma+0x10e/0x1b0 [ 286.800624][ T28] ? can_vma_merge_before+0x3a0/0x3a0 [ 286.806037][ T28] handle_mm_fault+0x47a/0xa00 [ 286.810811][ T28] ? lock_mm_and_find_vma+0xc2/0x780 [ 286.816125][ T28] do_user_addr_fault+0x3ad/0xfe0 [ 286.821183][ T28] ? rcu_is_watching+0x12/0xb0 [ 286.825976][ T28] exc_page_fault+0x5c/0xd0 [ 286.830498][ T28] asm_exc_page_fault+0x26/0x30 [ 286.835436][ T28] RIP: 0010:rep_movs_alternative+0x33/0xb0 [ 286.841292][ T28] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 286.860955][ T28] RSP: 0018:ffffc90003a0f8d8 EFLAGS: 00050206 [ 286.867049][ T28] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000000038 [ 286.875045][ T28] RDX: fffff52000741f32 RSI: ffffc90003a0f958 RDI: 00000000200000e0 [ 286.883213][ T28] RBP: 00000000200000e0 R08: 0000000000000000 R09: fffff52000741f31 [ 286.891170][ T28] R10: ffffc90003a0f98f R11: ffffffff81dbaca5 R12: ffffc90003a0f958 [ 286.899182][ T28] R13: 0000000020000118 R14: 0000000000000000 R15: 0000000000000000 [ 286.907191][ T28] ? kasan_set_track+0x25/0x30 [ 286.912034][ T28] _copy_to_user+0xa8/0xb0 [ 286.916527][ T28] fiemap_fill_next_extent+0x232/0x380 [ 286.922006][ T28] ? compat_ptr_ioctl+0xa0/0xa0 [ 286.926887][ T28] extent_fiemap+0x13e0/0x19f0 [ 286.931675][ T28] ? read_extent_buffer+0x220/0x220 [ 286.936910][ T28] ? btrfs_put_ordered_extent+0x44d/0x620 [ 286.942670][ T28] ? kmem_cache_free+0xf0/0x490 [ 286.947516][ T28] ? btrfs_put_ordered_extent+0x44d/0x620 [ 286.953258][ T28] ? btrfs_wait_ordered_range+0x8b/0x280 [ 286.958907][ T28] btrfs_fiemap+0xe4/0x160 [ 286.963351][ T28] ? btrfs_permission+0x1b0/0x1b0 [ 286.968391][ T28] do_vfs_ioctl+0x339/0x1920 [ 286.973035][ T28] ? vfs_fileattr_set+0xbf0/0xbf0 [ 286.978083][ T28] ? rcu_is_watching+0x12/0xb0 [ 286.982873][ T28] ? lock_release+0x4bf/0x680 [ 286.987561][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 286.992521][ T28] __x64_sys_ioctl+0x112/0x210 [ 286.997325][ T28] do_syscall_64+0x38/0xb0 [ 287.001731][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.007651][ T28] RIP: 0033:0x7f2672873b19 [ 287.012067][ T28] RSP: 002b:00007ffe11deffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.020499][ T28] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00007f2672873b19 [ 287.028511][ T28] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 287.036534][ T28] RBP: 00007f26728eb5f0 R08: 0000000000000000 R09: 0000000000000000 [ 287.044562][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe11df0020 [ 287.052576][ T28] R13: 00007ffe11df0248 R14: 431bde82d7b634db R15: 00007f26728bc03b [ 287.060554][ T28] [ 287.063607][ T28] INFO: lockdep is turned off. [ 287.068371][ T28] NMI backtrace for cpu 1 [ 287.072677][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 287.081941][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.091983][ T28] Call Trace: [ 287.095246][ T28] [ 287.098159][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.102766][ T28] nmi_cpu_backtrace+0x277/0x380 [ 287.107690][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.112879][ T28] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 287.118850][ T28] watchdog+0xfab/0x1230 [ 287.123104][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.129081][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.135052][ T28] kthread+0x33a/0x430 [ 287.139107][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.144726][ T28] ret_from_fork+0x2c/0x70 [ 287.149146][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.154763][ T28] ret_from_fork_asm+0x11/0x20 [ 287.159532][ T28] [ 287.162597][ T28] Sending NMI from CPU 1 to CPUs 0: [ 287.167821][ C0] NMI backtrace for cpu 0 [ 287.167830][ C0] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 287.167851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.167863][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.167889][ C0] RIP: 0010:memcpy_orig+0x11e/0x120 [ 287.167918][ C0] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 90 83 ea 01 72 19 0f b6 0e 74 12 4c 0f b6 46 01 4c 0f b6 0c 16 44 88 47 01 44 88 0c 17 88 0f 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 [ 287.167935][ C0] RSP: 0018:ffffc900015979b8 EFLAGS: 00000046 [ 287.167948][ C0] RAX: 00002aaaaaaab757 RBX: ffff888012867558 RCX: 000000000000000f [ 287.167961][ C0] RDX: 0000000000000000 RSI: ffffc90001597b18 RDI: 00002aaaaaaab757 [ 287.167973][ C0] RBP: ffffffff81db8757 R08: 0000000000000000 R09: ffffed100250d0f0 [ 287.167985][ C0] R10: ffff888012868783 R11: 0000000000000000 R12: ffffffff8eac97d4 [ 287.167997][ C0] R13: 0000000000000757 R14: 0000000000000758 R15: ffffffff8cb157c0 [ 287.168008][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.168028][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.168041][ C0] CR2: 0000564eb4987068 CR3: 0000000012863000 CR4: 00000000003506f0 [ 287.168053][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.168063][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.168074][ C0] Call Trace: [ 287.168079][ C0] [ 287.168085][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.168111][ C0] ? memcpy_orig+0x11e/0x120 [ 287.168136][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.168162][ C0] ? nmi_handle+0x145/0x400 [ 287.168185][ C0] ? memcpy_orig+0x11e/0x120 [ 287.168210][ C0] ? default_do_nmi+0x69/0x160 [ 287.168231][ C0] ? exc_nmi+0x171/0x1e0 [ 287.168252][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.168276][ C0] ? kmem_cache_alloc_bulk+0x197/0x7c0 [ 287.168304][ C0] ? memcpy_orig+0x11e/0x120 [ 287.168329][ C0] ? memcpy_orig+0x11e/0x120 [ 287.168354][ C0] ? memcpy_orig+0x11e/0x120 [ 287.168378][ C0] [ 287.168383][ C0] [ 287.168388][ C0] __text_poke+0x303/0x8f0 [ 287.168404][ C0] ? setup_data_read+0x200/0x200 [ 287.168424][ C0] ? apply_relocation+0x680/0x680 [ 287.168442][ C0] ? __text_poke+0x8f0/0x8f0 [ 287.168460][ C0] text_poke_bp_batch+0x507/0x780 [ 287.168479][ C0] ? __kmem_cache_alloc_node+0xca/0x350 [ 287.168505][ C0] ? do_sync_core+0x30/0x30 [ 287.168522][ C0] ? __jump_label_patch+0x21c/0x340 [ 287.168548][ C0] ? arch_jump_label_transform_queue+0xa3/0x100 [ 287.168577][ C0] text_poke_finish+0x1a/0x30 [ 287.168595][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 287.168621][ C0] jump_label_update+0x32e/0x410 [ 287.168647][ C0] static_key_disable_cpuslocked+0x154/0x1b0 [ 287.168674][ C0] static_key_disable+0x1a/0x20 [ 287.168698][ C0] toggle_allocation_gate+0x13f/0x250 [ 287.168719][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 287.168739][ C0] ? __schedule+0xee9/0x59f0 [ 287.168762][ C0] ? prepare_to_swait_exclusive+0x240/0x240 [ 287.168788][ C0] ? rcu_is_watching+0x12/0xb0 [ 287.168808][ C0] process_one_work+0xaa2/0x16f0 [ 287.168834][ C0] ? lock_sync+0x190/0x190 [ 287.168857][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 287.168881][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.168908][ C0] worker_thread+0x687/0x1110 [ 287.168934][ C0] ? __kthread_parkme+0x152/0x220 [ 287.168953][ C0] ? process_one_work+0x16f0/0x16f0 [ 287.168975][ C0] kthread+0x33a/0x430 [ 287.168992][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.169013][ C0] ret_from_fork+0x2c/0x70 [ 287.169033][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.169054][ C0] ret_from_fork_asm+0x11/0x20 [ 287.169085][ C0] [ 287.169091][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.271 msecs [ 287.169819][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.553751][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 [ 287.563030][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.573084][ T28] Call Trace: [ 287.576356][ T28] [ 287.579282][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.583873][ T28] panic+0x6a4/0x750 [ 287.587767][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 287.592878][ T28] ? __irq_work_queue_local+0x132/0x3f0 [ 287.598443][ T28] ? irq_work_queue+0x2a/0x70 [ 287.603119][ T28] ? __wake_up_klogd.part.0+0x99/0xf0 [ 287.608496][ T28] ? watchdog+0xd63/0x1230 [ 287.612920][ T28] watchdog+0xd74/0x1230 [ 287.617165][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.623152][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.629134][ T28] kthread+0x33a/0x430 [ 287.633198][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.638829][ T28] ret_from_fork+0x2c/0x70 [ 287.643245][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.648879][ T28] ret_from_fork_asm+0x11/0x20 [ 287.653659][ T28] [ 287.656879][ T28] Kernel Offset: disabled [ 287.661187][ T28] Rebooting in 86400 seconds..