./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1026830229 <...> Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. execve("./syz-executor1026830229", ["./syz-executor1026830229"], 0x7ffe212850e0 /* 10 vars */) = 0 brk(NULL) = 0x555566af8000 brk(0x555566af8d00) = 0x555566af8d00 arch_prctl(ARCH_SET_FS, 0x555566af8380) = 0 set_tid_address(0x555566af8650) = 5847 set_robust_list(0x555566af8660, 24) = 0 rseq(0x555566af8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1026830229", 4096) = 28 getrandom("\x2c\xd4\xe6\x3d\x9c\xac\x33\x6a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555566af8d00 brk(0x555566b19d00) = 0x555566b19d00 brk(0x555566b1a000) = 0x555566b1a000 mprotect(0x7f1b9b1f1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached [pid 5849] set_robust_list(0x555566af8660, 24) = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5847] <... clone resumed>, child_tidptr=0x555566af8650) = 5849 [pid 5849] <... prctl resumed>) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1b92c00000 [pid 5849] write(3, "\x58\x46\x53\x42\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x65\x4a\x66\x62\xe5\x49\x63\xa8\x1e\x01\x2d\x9d\x48\x71\xaf\x00\x00\x00\x00\x00\x00\x40\x08\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x41\x00\x00\x00\x00\x00\x00\x00\x42\x00\x00\x00\x04\x00\x00\x40\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x04\x98"..., 33554432) = 33554432 [pid 5849] munmap(0x7f1b92c00000, 138412032) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [ 117.671569][ T5849] loop0: detected capacity change from 0 to 65536 [pid 5849] mount("/dev/loop0", "./file0", "xfs", 0, ",nouuid") = 0 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file0") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 117.722802][ T5849] XFS (loop0): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af [ 117.747493][ T5849] XFS (loop0): Ending clean mount [pid 5849] setxattr("./file0", "trusted.overlay.upper", "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65259, 0 [pid 5847] kill(-5849, SIGKILL) = 0 [pid 5847] kill(5849, SIGKILL) = 0 [pid 5847] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5847] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5847] getdents64(3, 0x555566af96f0 /* 2 entries */, 32768) = 48 [pid 5847] getdents64(3, 0x555566af96f0 /* 0 entries */, 32768) = 0 [pid 5847] close(3) = 0 [ 286.625279][ T30] INFO: task syz-executor102:5849 blocked for more than 143 seconds. [ 286.633599][ T30] Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 286.640709][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.649412][ T30] task:syz-executor102 state:D stack:22928 pid:5849 tgid:5849 ppid:5847 flags:0x00004006 [ 286.659656][ T30] Call Trace: [ 286.662928][ T30] [ 286.665910][ T30] __schedule+0x189f/0x4c80 [ 286.670463][ T30] ? __pfx___schedule+0x10/0x10 [ 286.675361][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.680409][ T30] ? schedule+0x90/0x320 [ 286.684701][ T30] schedule+0x14b/0x320 [ 286.688891][ T30] xlog_grant_head_wait+0x43b/0xa80 [ 286.694162][ T30] xlog_grant_head_check+0x342/0x4f0 [ 286.699502][ T30] ? rcu_is_watching+0x15/0xb0 [ 286.704301][ T30] ? __pfx_xlog_grant_head_check+0x10/0x10 [ 286.710118][ T30] ? xlog_ticket_alloc+0x286/0x400 [ 286.715271][ T30] xfs_log_reserve+0x337/0x8c0 [ 286.720048][ T30] ? __pfx_xfs_log_reserve+0x10/0x10 [ 286.725367][ T30] ? xfs_dec_freecounter+0x10d/0x270 [ 286.730665][ T30] xfs_trans_reserve+0x20a/0x640 [ 286.735699][ T30] xfs_trans_alloc+0x40e/0x830 [ 286.740492][ T30] xfs_trans_alloc_inode+0x1ac/0x5d0 [ 286.745847][ T30] ? xfs_attr_add_fork+0x23f/0x380 [ 286.750978][ T30] ? rcu_is_watching+0x15/0xb0 [ 286.755812][ T30] ? xfs_attr_add_fork+0x23f/0x380 [ 286.760939][ T30] ? __pfx_xfs_trans_alloc_inode+0x10/0x10 [ 286.766819][ T30] ? xfs_attr_leaf_newentsize+0xda/0x1e0 [ 286.772476][ T30] xfs_attr_set+0x8a8/0x1420 [ 286.777169][ T30] ? __pfx_xfs_attr_set+0x10/0x10 [ 286.782219][ T30] ? xfs_attr_change+0x2ca/0x3b0 [ 286.787273][ T30] xfs_xattr_set+0x1ff/0x350 [ 286.791884][ T30] ? __pfx_xfs_xattr_set+0x10/0x10 [ 286.797057][ T30] ? posix_xattr_acl+0xa9/0xd0 [ 286.801956][ T30] ? evm_protect_xattr+0x4be/0xb30 [ 286.807298][ T30] ? rcu_is_watching+0x15/0xb0 [ 286.812100][ T30] ? __pfx_xfs_xattr_set+0x10/0x10 [ 286.817297][ T30] __vfs_setxattr+0x468/0x4a0 [ 286.821999][ T30] __vfs_setxattr_noperm+0x12e/0x660 [ 286.827340][ T30] vfs_setxattr+0x221/0x430 [ 286.831863][ T30] ? __pfx_vfs_setxattr+0x10/0x10 [ 286.836963][ T30] filename_setxattr+0x2af/0x430 [ 286.841909][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 286.847008][ T30] ? __pfx_filename_setxattr+0x10/0x10 [ 286.852476][ T30] ? getname_flags+0x1e3/0x540 [ 286.857290][ T30] path_setxattrat+0x440/0x510 [ 286.862065][ T30] ? __pfx_path_setxattrat+0x10/0x10 [ 286.867442][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.872662][ T30] ? ptrace_notify+0x279/0x380 [ 286.877487][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.883866][ T30] __x64_sys_setxattr+0xbc/0xe0 [ 286.888725][ T30] do_syscall_64+0xf3/0x230 [ 286.893264][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.897954][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.903906][ T30] RIP: 0033:0x7f1b9b172a99 [ 286.908339][ T30] RSP: 002b:00007ffd2129aa58 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 286.916785][ T30] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f1b9b172a99 [ 286.924795][ T30] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 00000000200000c0 [ 286.932752][ T30] RBP: 00007f1b9b1f15f0 R08: 0000000000000000 R09: 0000555566af94c0 [ 286.940822][ T30] R10: 000000000000feeb R11: 0000000000000246 R12: 00007ffd2129aa80 [ 286.948830][ T30] R13: 00007ffd2129aca8 R14: 431bde82d7b634db R15: 00007f1b9b1bb03b [ 286.956884][ T30] [ 286.960022][ T30] [ 286.960022][ T30] Showing all locks held in the system: [ 286.967803][ T30] 1 lock held by khungtaskd/30: [ 286.972654][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 286.982571][ T30] 2 locks held by getty/5595: [ 286.987287][ T30] #0: ffff88814d02f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.997070][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 287.007268][ T30] 3 locks held by syz-executor102/5849: [ 287.012835][ T30] #0: ffff88807b484420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 287.022086][ T30] #1: ffff888072cf0330 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{4:4}, at: vfs_setxattr+0x1e1/0x430 [ 287.033435][ T30] #2: ffff88807b484610 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x1ac/0x5d0 [ 287.043555][ T30] [ 287.045879][ T30] ============================================= [ 287.045879][ T30] [ 287.054324][ T30] NMI backtrace for cpu 1 [ 287.054343][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 287.054367][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.054376][ T30] Call Trace: [ 287.054381][ T30] [ 287.054388][ T30] dump_stack_lvl+0x241/0x360 [ 287.054411][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.054427][ T30] ? __pfx__printk+0x10/0x10 [ 287.054459][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.054483][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.054500][ T30] ? _printk+0xd5/0x120 [ 287.054520][ T30] ? __pfx__printk+0x10/0x10 [ 287.054542][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.054561][ T30] ? __pfx__printk+0x10/0x10 [ 287.054580][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.054597][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.054616][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.054639][ T30] watchdog+0xff6/0x1040 [ 287.054661][ T30] ? watchdog+0x1ea/0x1040 [ 287.054685][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.054705][ T30] kthread+0x7a9/0x920 [ 287.054726][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054748][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.054769][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054788][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054811][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054830][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.054850][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.054872][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054894][ T30] ret_from_fork+0x4b/0x80 [ 287.054912][ T30] ? __pfx_kthread+0x10/0x10 [ 287.054934][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.054964][ T30] [ 287.054971][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.223099][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 287.224090][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.224106][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 287.224128][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.224139][ T30] Call Trace: [ 287.224148][ T30] [ 287.224156][ T30] dump_stack_lvl+0x241/0x360 [ 287.224181][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.224199][ T30] ? __pfx__printk+0x10/0x10 [ 287.224222][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.224257][ T30] ? vscnprintf+0x5d/0x90 [ 287.224280][ T30] panic+0x349/0x880 [ 287.224305][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.224329][ T30] ? __pfx_panic+0x10/0x10 [ 287.224356][ T30] ? irq_work_queue+0xd1/0x150 [ 287.224377][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.224399][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.224419][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.224439][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.224462][ T30] watchdog+0x1035/0x1040 [ 287.224485][ T30] ? watchdog+0x1ea/0x1040 [ 287.224511][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.224532][ T30] kthread+0x7a9/0x920 [ 287.224554][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224576][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.224597][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224617][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224641][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224662][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.224683][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.224705][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224729][ T30] ret_from_fork+0x4b/0x80 [ 287.224749][ T30] ? __pfx_kthread+0x10/0x10 [ 287.224772][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.224802][ T30] [ 287.404076][ T30] Kernel Offset: disabled [ 287.408387][ T30] Rebooting in 86400 seconds..