./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2162721793 <...> Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. execve("./syz-executor2162721793", ["./syz-executor2162721793"], 0x7ffea816c0f0 /* 10 vars */) = 0 brk(NULL) = 0x555577308000 brk(0x555577308d00) = 0x555577308d00 arch_prctl(ARCH_SET_FS, 0x555577308380) = 0 set_tid_address(0x555577308650) = 5818 set_robust_list(0x555577308660, 24) = 0 rseq(0x555577308ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2162721793", 4096) = 28 getrandom("\x1e\xb9\xf2\x1b\x18\xce\x90\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555577308d00 brk(0x555577329d00) = 0x555577329d00 brk(0x55557732a000) = 0x55557732a000 mprotect(0x7f64344af000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5819 attached , child_tidptr=0x555577308650) = 5819 [pid 5819] set_robust_list(0x555577308660, 24) = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5819] write(1, "executing program\n", 18executing program ) = 18 [pid 5819] memfd_create("syzkaller", 0) = 3 [pid 5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f642bfef000 [pid 5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5819] munmap(0x7f642bfef000, 138412032) = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5819] close(3) = 0 [pid 5819] close(4) = 0 [pid 5819] mkdir("./file1", 0777) = 0 [pid 5819] mount("/dev/loop0", "./file1", "jfs", 0, "") = 0 [ 99.018150][ T5819] loop0: detected capacity change from 0 to 32768 [pid 5819] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5819] chdir("./file1") = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5819] symlink("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" [pid 5818] kill(-5819, SIGKILL) = 0 [pid 5818] kill(5819, SIGKILL) = 0 [pid 5818] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5818] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5818] getdents64(3, 0x5555773096f0 /* 2 entries */, 32768) = 48 [pid 5818] getdents64(3, 0x5555773096f0 /* 0 entries */, 32768) = 0 [pid 5818] close(3) = 0 [ 286.759393][ T39] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 286.759440][ T39] Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 [ 286.759455][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.759466][ T39] task:kworker/u8:0 state:D stack:22248 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 286.759538][ T39] Workqueue: writeback wb_workfn (flush-7:0) [ 286.759585][ T39] Call Trace: [ 286.759594][ T39] [ 286.759613][ T39] __schedule+0x16b2/0x4ca0 [ 286.759664][ T39] ? rcu_is_watching+0x15/0xb0 [ 286.759701][ T39] ? rt_mutex_schedule+0x77/0xf0 [ 286.759728][ T39] ? __pfx___schedule+0x10/0x10 [ 286.759751][ T39] ? rcu_read_unlock_special+0x40e/0x530 [ 286.759782][ T39] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 286.759809][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.759855][ T39] rt_mutex_schedule+0x77/0xf0 [ 286.759876][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 286.759912][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 286.759939][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 286.759964][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 286.759988][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 286.760008][ T39] ? __lock_acquire+0xab9/0xd20 [ 286.760050][ T39] ? jfs_commit_inode+0x1ca/0x530 [ 286.760078][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.760107][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.760142][ T39] ? jfs_commit_inode+0x1ca/0x530 [ 286.760166][ T39] mutex_lock_nested+0x16a/0x1d0 [ 286.760194][ T39] jfs_commit_inode+0x1ca/0x530 [ 286.760223][ T39] ? __pfx_jfs_commit_inode+0x10/0x10 [ 286.760250][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.760283][ T39] jfs_write_inode+0x145/0x220 [ 286.760313][ T39] __writeback_single_inode+0x6f4/0x1000 [ 286.760361][ T39] writeback_sb_inodes+0x6a5/0xf50 [ 286.760418][ T39] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 286.760505][ T39] __writeback_inodes_wb+0x111/0x240 [ 286.760544][ T39] wb_writeback+0x44f/0xaf0 [ 286.760582][ T39] ? queue_io+0x391/0x560 [ 286.760614][ T39] ? __pfx_wb_writeback+0x10/0x10 [ 286.760660][ T39] wb_workfn+0xaf4/0xf00 [ 286.760700][ T39] ? __pfx_wb_workfn+0x10/0x10 [ 286.760730][ T39] ? __lock_acquire+0xab9/0xd20 [ 286.760771][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 286.760803][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.760830][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 286.760855][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 286.760883][ T39] process_scheduled_works+0xade/0x17b0 [ 286.760939][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.760983][ T39] worker_thread+0x8a0/0xda0 [ 286.761038][ T39] kthread+0x70e/0x8a0 [ 286.761073][ T39] ? __pfx_worker_thread+0x10/0x10 [ 286.761098][ T39] ? __pfx_kthread+0x10/0x10 [ 286.761136][ T39] ? __pfx_kthread+0x10/0x10 [ 286.761168][ T39] ret_from_fork+0x3fc/0x770 [ 286.761198][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 286.761231][ T39] ? __switch_to_asm+0x39/0x70 [ 286.761263][ T39] ? __switch_to_asm+0x33/0x70 [ 286.761294][ T39] ? __pfx_kthread+0x10/0x10 [ 286.761325][ T39] ret_from_fork_asm+0x1a/0x30 [ 286.761380][ T39] [ 286.763464][ T39] [ 286.763464][ T39] Showing all locks held in the system: [ 286.763482][ T39] 4 locks held by kworker/u8:0/12: [ 286.763497][ T39] #0: ffff88814049b138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.763561][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.763625][ T39] #2: ffff888034c580d0 (&type->s_umount_key#43){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 286.763691][ T39] #3: ffff88803e0a9588 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 286.763751][ T39] 1 lock held by khungtaskd/39: [ 286.763763][ T39] #0: ffffffff8d7aa0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.763836][ T39] 2 locks held by kworker/u8:11/1454: [ 286.763849][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.763903][ T39] #1: ffffc900057efbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.763970][ T39] 2 locks held by getty/5573: [ 286.763982][ T39] #0: ffff88823bf868a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.764046][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 286.764110][ T39] 4 locks held by syz-executor216/5819: [ 286.764123][ T39] [ 286.764128][ T39] ============================================= [ 286.764128][ T39] [ 286.764154][ T39] NMI backtrace for cpu 1 [ 286.764177][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT_{RT,(full)} [ 286.764208][ T39] Tainted: [W]=WARN [ 286.764215][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.764227][ T39] Call Trace: [ 286.764237][ T39] [ 286.764247][ T39] dump_stack_lvl+0x189/0x250 [ 286.764280][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.764309][ T39] ? __pfx__printk+0x10/0x10 [ 286.764343][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 286.764371][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.764397][ T39] ? __pfx__printk+0x10/0x10 [ 286.764422][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.764450][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 286.764476][ T39] watchdog+0xf93/0xfe0 [ 286.764511][ T39] ? watchdog+0x1de/0xfe0 [ 286.764547][ T39] kthread+0x70e/0x8a0 [ 286.764581][ T39] ? __pfx_watchdog+0x10/0x10 [ 286.764609][ T39] ? __pfx_kthread+0x10/0x10 [ 286.764645][ T39] ? __pfx_kthread+0x10/0x10 [ 286.764676][ T39] ret_from_fork+0x3fc/0x770 [ 286.764706][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 286.764738][ T39] ? __switch_to_asm+0x39/0x70 [ 286.764768][ T39] ? __switch_to_asm+0x33/0x70 [ 286.764798][ T39] ? __pfx_kthread+0x10/0x10 [ 286.764830][ T39] ret_from_fork_asm+0x1a/0x30 [ 286.764878][ T39] [ 286.764886][ T39] Sending NMI from CPU 1 to CPUs 0: [ 286.764922][ C0] NMI backtrace for cpu 0 [ 286.764940][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor216 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT_{RT,(full)} [ 286.764966][ C0] Tainted: [W]=WARN [ 286.764972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.764982][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 286.765008][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 54 ac 62 0b 48 89 de 5b e9 13 66 54 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 d0 91 65 8b 35 d8 b7 [ 286.765024][ C0] RSP: 0018:ffffc900043cf6a0 EFLAGS: 00000246 [ 286.765040][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffff8880108abb80 [ 286.765052][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.765063][ C0] RBP: ffff888035222000 R08: 0000000000000000 R09: 0000000000000000 [ 286.765074][ C0] R10: 0030000000000000 R11: 000007ff00000020 R12: dffffc0000000000 [ 286.765088][ C0] R13: 1ffff11006a44400 R14: 0000000000000000 R15: 1ffff11006a44402 [ 286.765101][ C0] FS: 0000555577308380(0000) GS:ffff888126b1c000(0000) knlGS:0000000000000000 [ 286.765117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.765129][ C0] CR2: 00007fffedae0090 CR3: 0000000010876000 CR4: 00000000003526f0 [ 286.765145][ C0] Call Trace: [ 286.765152][ C0] [ 286.765158][ C0] dtSplitRoot+0x7a6/0x16c0 [ 286.765192][ C0] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 286.765213][ C0] dtInsert+0xef8/0x5f40 [ 286.765241][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 286.765271][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.765302][ C0] ? __pfx_dtInsert+0x10/0x10 [ 286.765320][ C0] ? dtSearch+0x1d29/0x21b0 [ 286.765357][ C0] jfs_symlink+0x715/0xe60 [ 286.765386][ C0] ? __pfx_jfs_symlink+0x10/0x10 [ 286.765409][ C0] ? smk_access+0x14c/0x4e0 [ 286.765448][ C0] ? generic_permission+0x2e5/0x690 [ 286.765472][ C0] ? bpf_lsm_inode_symlink+0x9/0x20 [ 286.765494][ C0] vfs_symlink+0x140/0x2f0 [ 286.765522][ C0] do_symlinkat+0x1b1/0x3f0 [ 286.765549][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 286.765573][ C0] ? strncpy_from_user+0x150/0x290 [ 286.765593][ C0] ? getname_flags+0x1e5/0x540 [ 286.765612][ C0] __x64_sys_symlink+0x7a/0x90 [ 286.765639][ C0] do_syscall_64+0xfa/0x3b0 [ 286.765664][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.765686][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.765704][ C0] ? clear_bhb_loop+0x60/0xb0 [ 286.765725][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.765743][ C0] RIP: 0033:0x7f6434435b59 [ 286.765766][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.765781][ C0] RSP: 002b:00007ffd8c4c7e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 286.765799][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6434435b59 [ 286.765811][ C0] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000020000000a900 [ 286.765823][ C0] RBP: 00007f64344af5f0 R08: 0000000000006204 R09: 00005555773094c0 [ 286.765836][ C0] R10: 00007ffd8c4c7d40 R11: 0000000000000246 R12: 00007ffd8c4c7ea0 [ 286.765848][ C0] R13: 00007ffd8c4c80c8 R14: 431bde82d7b634db R15: 00007f643447e03b [ 286.765870][ C0] [ 286.765919][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 286.765944][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT_{RT,(full)} [ 286.765975][ T39] Tainted: [W]=WARN [ 286.765983][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.765996][ T39] Call Trace: [ 286.766004][ T39] [ 286.766019][ T39] dump_stack_lvl+0x99/0x250 [ 286.766049][ T39] ? __asan_memcpy+0x40/0x70 [ 286.766076][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.766106][ T39] ? __pfx__printk+0x10/0x10 [ 286.766139][ T39] panic+0x2db/0x790 [ 286.766174][ T39] ? __pfx_panic+0x10/0x10 [ 286.766203][ T39] ? __pfx___x2apic_send_IPI_mask+0x10/0x10 [ 286.766245][ T39] ? irq_work_queue+0xc3/0x140 [ 286.766285][ T39] watchdog+0xfd2/0xfe0 [ 286.766319][ T39] ? watchdog+0x1de/0xfe0 [ 286.766354][ T39] kthread+0x70e/0x8a0 [ 286.766388][ T39] ? __pfx_watchdog+0x10/0x10 [ 286.766416][ T39] ? __pfx_kthread+0x10/0x10 [ 286.766453][ T39] ? __pfx_kthread+0x10/0x10 [ 286.766485][ T39] ret_from_fork+0x3fc/0x770 [ 286.766514][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 286.766546][ T39] ? __switch_to_asm+0x39/0x70 [ 286.766576][ T39] ? __switch_to_asm+0x33/0x70 [ 286.766607][ T39] ? __pfx_kthread+0x10/0x10 [ 286.766638][ T39] ret_from_fork_asm+0x1a/0x30 [ 286.766686][ T39] [ 286.767007][ T39] Kernel Offset: disabled