./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3802747983 <...> Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. execve("./syz-executor3802747983", ["./syz-executor3802747983"], 0x7ffef31e9b20 /* 10 vars */) = 0 brk(NULL) = 0x5555944b4000 brk(0x5555944b4d00) = 0x5555944b4d00 arch_prctl(ARCH_SET_FS, 0x5555944b4380) = 0 set_tid_address(0x5555944b4650) = 5071 set_robust_list(0x5555944b4660, 24) = 0 rseq(0x5555944b4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3802747983", 4096) = 28 getrandom("\xeb\x7e\xd0\x72\xdc\x18\xbe\x08", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555944b4d00 brk(0x5555944d5d00) = 0x5555944d5d00 brk(0x5555944d6000) = 0x5555944d6000 mprotect(0x7f4b78288000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555944b4650) = 5072 ./strace-static-x86_64: Process 5072 attached [pid 5072] set_robust_list(0x5555944b4660, 24) = 0 [pid 5072] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setsid() = 1 [pid 5072] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5072] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5072] unshare(CLONE_NEWNS) = 0 [pid 5072] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5072] unshare(CLONE_NEWIPC) = 0 [pid 5072] unshare(CLONE_NEWCGROUP) = 0 [pid 5072] unshare(CLONE_NEWUTS) = 0 [pid 5072] unshare(CLONE_SYSVSEM) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "16777216", 8) = 8 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "536870912", 9) = 9 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "8192", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5072] close(3) = 0 [pid 5072] getpid() = 1 [pid 5072] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5075] set_robust_list(0x5555944b4660, 24) = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555944b4650) = 2 [pid 5075] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4b6fc00000 [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5075] munmap(0x7f4b6fc00000, 138412032) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5075] close(3) = 0 [pid 5075] close(4) = 0 [pid 5075] mkdir("./file0", 0777) = 0 syzkaller login: [ 57.674210][ T5075] loop0: detected capacity change from 0 to 32768 [ 57.741599][ T5075] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 57.755953][ T5075] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 57.774522][ T5075] bcachefs (loop0): alloc_read... done [ 57.780266][ T5075] bcachefs (loop0): stripes_read... done [pid 5075] mount("/dev/loop0", "./file0", "bcachefs", 0, "\x24\xe5\x12\xfb\xe5") = 0 [pid 5075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file0") = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_CLR_FD) = 0 [pid 5075] close(4) = 0 [pid 5075] creat("./bus", 000) = 4 [ 57.785939][ T5075] bcachefs (loop0): snapshots_read... done [ 57.794066][ T5075] bcachefs (loop0): journal_replay... done [ 57.799967][ T5075] bcachefs (loop0): resume_logged_ops... done [ 57.806217][ T5075] bcachefs (loop0): going read-write [ 57.815134][ T5075] bcachefs (loop0): done starting filesystem [pid 5075] creat(NULL, 000) = -1 EFAULT (Bad address) [pid 5075] fcntl(4, F_SETFL, O_RDONLY|O_NOCTTY|O_DIRECT|O_NOATIME|FASYNC) = 0 [pid 5075] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 258223742 [pid 5072] kill(-2, SIGKILL) = 0 [pid 5072] kill(2, SIGKILL) = 0 [pid 5072] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x5555944b56f0 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, 0x5555944b56f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [ 76.848852][ T45] cfg80211: failed to load regulatory.db [ 286.767021][ T30] INFO: task syz-executor380:5075 blocked for more than 143 seconds. [ 286.775413][ T30] Not tainted 6.9.0-syzkaller-01049-g8815da98e06a #0 [ 286.782759][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.791524][ T30] task:syz-executor380 state:D stack:15344 pid:5075 tgid:5075 ppid:5072 flags:0x00004006 [ 286.801767][ T30] Call Trace: [ 286.805059][ T30] [ 286.808039][ T30] __schedule+0x1796/0x4a00 [ 286.812697][ T30] ? __pfx___schedule+0x10/0x10 [ 286.817598][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.822711][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.827816][ T30] ? __folio_put+0x299/0x390 [ 286.832474][ T30] ? schedule+0x90/0x320 [ 286.836728][ T30] schedule+0x14b/0x320 [ 286.840974][ T30] __closure_sync+0x259/0x2f0 [ 286.845676][ T30] ? __closure_sync+0x149/0x2f0 [ 286.850581][ T30] ? __pfx___closure_sync+0x10/0x10 [ 286.855807][ T30] __bch2_write+0x5458/0x5bd0 [ 286.860624][ T30] ? __pfx___bch2_write+0x10/0x10 [ 286.865683][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.870771][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.875984][ T30] bch2_write+0x947/0x15b0 [ 286.880473][ T30] ? __pfx_bch2_write+0x10/0x10 [ 286.885336][ T30] ? bio_uninit+0x2b0/0x3b0 [ 286.889940][ T30] ? iov_iter_revert+0x1c8/0x390 [ 286.894980][ T30] ? bch2_direct_write+0x1160/0x3050 [ 286.900324][ T30] bch2_direct_write+0x1a52/0x3050 [ 286.905495][ T30] ? __pfx_bch2_direct_write+0x10/0x10 [ 286.911023][ T30] bch2_write_iter+0x206/0x2840 [ 286.915905][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.921006][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 286.926309][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 286.931819][ T30] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 286.937781][ T30] vfs_write+0xa84/0xcb0 [ 286.942060][ T30] ? __pfx_vfs_write+0x10/0x10 [ 286.946899][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.952171][ T30] ? __fdget_pos+0x272/0x320 [ 286.956867][ T30] ksys_write+0x1a0/0x2c0 [ 286.961222][ T30] ? __pfx_ksys_write+0x10/0x10 [ 286.966068][ T30] ? do_syscall_64+0x102/0x240 [ 286.970950][ T30] do_syscall_64+0xf5/0x240 [ 286.975471][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.980281][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.986183][ T30] RIP: 0033:0x7f4b7820edf9 [ 286.990640][ T30] RSP: 002b:00007ffc744fdc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.999137][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4b7820edf9 [ 287.007261][ T30] RDX: 000000000f642e7e RSI: 0000000020000200 RDI: 0000000000000004 [ 287.015258][ T30] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 287.023277][ T30] R10: 0000555500000000 R11: 0000000000000246 R12: 00000000000f4240 [ 287.031360][ T30] R13: 00007ffc744fdef8 R14: 0000000000000001 R15: 00007ffc744fdcc0 [ 287.039426][ T30] [ 287.042454][ T30] [ 287.042454][ T30] Showing all locks held in the system: [ 287.050208][ T30] 1 lock held by khungtaskd/30: [ 287.055075][ T30] #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.065033][ T30] 2 locks held by getty/4830: [ 287.069765][ T30] #0: ffff88802b1770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.079671][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.090019][ T30] 2 locks held by syz-executor380/5075: [ 287.095580][ T30] #0: ffff888078f28420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 287.104515][ T30] #1: ffff88807eeb8150 (&sb->s_type->i_mutex_key#16){+.+.}-{3:3}, at: bch2_direct_write+0x243/0x3050 [ 287.115572][ T30] [ 287.117948][ T30] ============================================= [ 287.117948][ T30] [ 287.126361][ T30] NMI backtrace for cpu 1 [ 287.130674][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.9.0-syzkaller-01049-g8815da98e06a #0 [ 287.140119][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.150151][ T30] Call Trace: [ 287.153414][ T30] [ 287.156330][ T30] dump_stack_lvl+0x241/0x360 [ 287.160997][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.166179][ T30] ? __pfx__printk+0x10/0x10 [ 287.170800][ T30] ? vprintk_emit+0x631/0x770 [ 287.175464][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.180475][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.185424][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.190865][ T30] ? _printk+0xd5/0x120 [ 287.195002][ T30] ? __pfx__printk+0x10/0x10 [ 287.199573][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.204417][ T30] ? __pfx__printk+0x10/0x10 [ 287.208989][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.214021][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.220035][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.226015][ T30] watchdog+0xfde/0x1020 [ 287.230259][ T30] ? watchdog+0x1ea/0x1020 [ 287.234661][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.239407][ T30] kthread+0x2f0/0x390 [ 287.243495][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.248185][ T30] ? __pfx_kthread+0x10/0x10 [ 287.252805][ T30] ret_from_fork+0x4b/0x80 [ 287.257244][ T30] ? __pfx_kthread+0x10/0x10 [ 287.261823][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.266598][ T30] [ 287.269797][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.275046][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 287.276076][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.291316][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.9.0-syzkaller-01049-g8815da98e06a #0 [ 287.300782][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.310825][ T30] Call Trace: [ 287.314094][ T30] [ 287.317017][ T30] dump_stack_lvl+0x241/0x360 [ 287.321696][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.326887][ T30] ? __pfx__printk+0x10/0x10 [ 287.331476][ T30] ? vscnprintf+0x5d/0x90 [ 287.335850][ T30] panic+0x349/0x860 [ 287.339742][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.345889][ T30] ? __pfx_panic+0x10/0x10 [ 287.350298][ T30] ? nmi_backtrace_stall_check+0x431/0x440 [ 287.356110][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.361473][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.367624][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.373770][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.379919][ T30] watchdog+0x101d/0x1020 [ 287.384240][ T30] ? watchdog+0x1ea/0x1020 [ 287.388650][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.393316][ T30] kthread+0x2f0/0x390 [ 287.397383][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.402047][ T30] ? __pfx_kthread+0x10/0x10 [ 287.406655][ T30] ret_from_fork+0x4b/0x80 [ 287.411094][ T30] ? __pfx_kthread+0x10/0x10 [ 287.415690][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.420462][ T30] [ 287.423721][ T30] Kernel Offset: disabled [ 287.428034][ T30] Rebooting in 86400 seconds..