./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2466228249 <...> Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. execve("./syz-executor2466228249", ["./syz-executor2466228249"], 0x7ffda076a6c0 /* 10 vars */) = 0 brk(NULL) = 0x555569713000 brk(0x555569713d00) = 0x555569713d00 arch_prctl(ARCH_SET_FS, 0x555569713380) = 0 set_tid_address(0x555569713650) = 5854 set_robust_list(0x555569713660, 24) = 0 rseq(0x555569713ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2466228249", 4096) = 28 getrandom("\x73\xab\xea\x2e\xbe\x10\x16\xbb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555569713d00 brk(0x555569734d00) = 0x555569734d00 brk(0x555569735000) = 0x555569735000 mprotect(0x7f1999d28000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached , child_tidptr=0x555569713650) = 5855 [pid 5855] set_robust_list(0x555569713660, 24) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] write(1, "executing program\n", 18executing program ) = 18 [pid 5855] mknodat(AT_FDCWD, "./file0", 000) = 0 [pid 5855] pipe2([3, 4], 0) = 0 [pid 5855] write(4, "\x15\x00\x00\x00\x65\xff\xff\x01\x7f\x00\x0e\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5855] dup(4) = 5 [pid 5855] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5855] write(5, "\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176 [pid 5855] write(5, "\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 5855] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5855] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EIO (Input/output error) [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY) = 6 [pid 5855] read(6, "", 8224) = 0 [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached , child_tidptr=0x555569713650) = 5857 [pid 5857] set_robust_list(0x555569713660, 24) = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5857] write(3, "1000", 4) = 4 [pid 5857] close(3) = 0 executing program [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5857] mknodat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 5857] pipe2([3, 4], 0) = 0 [pid 5857] write(4, "\x15\x00\x00\x00\x65\xff\xff\x01\x7f\x00\x0e\x08\x00\x39\x50\x32\x30\x30\x30\x00\x00", 21) = 21 [pid 5857] dup(4) = 5 [pid 5857] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5857] write(5, "\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176 [pid 5857] write(5, "\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 5857] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5857] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = 0 [pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY) = 6 [pid 5857] read(6, [pid 5854] kill(-5857, SIGKILL) = 0 [pid 5854] kill(5857, SIGKILL) = 0 [pid 5854] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5854] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5854] getdents64(3, 0x5555697146f0 /* 2 entries */, 32768) = 48 [pid 5854] getdents64(3, 0x5555697146f0 /* 0 entries */, 32768) = 0 [pid 5854] close(3) = 0 [ 429.998356][ T30] INFO: task syz-executor246:5857 blocked for more than 143 seconds. [ 430.006710][ T30] Not tainted 6.12.0-next-20241126-syzkaller #0 [ 430.013676][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.022631][ T30] task:syz-executor246 state:D stack:22584 pid:5857 tgid:5857 ppid:5854 flags:0x00004006 [ 430.032995][ T30] Call Trace: [ 430.036310][ T30] [ 430.039299][ T30] __schedule+0x1850/0x4c30 [ 430.043915][ T30] ? __pfx___schedule+0x10/0x10 [ 430.049292][ T30] ? __pfx_lock_release+0x10/0x10 [ 430.054487][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 430.059866][ T30] ? schedule+0x90/0x320 [ 430.064169][ T30] schedule+0x14b/0x320 [ 430.068440][ T30] bit_wait+0x12/0xd0 [ 430.072478][ T30] __wait_on_bit+0xb0/0x2f0 [ 430.077199][ T30] ? __pfx_bit_wait+0x10/0x10 [ 430.081991][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 430.087492][ T30] ? __pfx_bit_wait+0x10/0x10 [ 430.092253][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 430.098343][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 430.103832][ T30] ? iov_iter_bvec_advance+0x220/0x240 [ 430.109415][ T30] netfs_unbuffered_read_iter_locked+0xd7e/0x1560 [ 430.115899][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 430.121555][ T30] vfs_read+0x991/0xb70 [ 430.125798][ T30] ? __pfx_vfs_read+0x10/0x10 [ 430.131040][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 430.136319][ T30] ? ptrace_notify+0x279/0x380 [ 430.141220][ T30] ksys_read+0x18f/0x2b0 [ 430.145522][ T30] ? __pfx_ksys_read+0x10/0x10 [ 430.150494][ T30] ? do_syscall_64+0x100/0x230 [ 430.155324][ T30] do_syscall_64+0xf3/0x230 [ 430.159964][ T30] ? clear_bhb_loop+0x35/0x90 [ 430.164779][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.170877][ T30] RIP: 0033:0x7f1999cb4f79 [ 430.175377][ T30] RSP: 002b:00007ffef9ec4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.183951][ T30] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f1999cb4f79 [ 430.192042][ T30] RDX: 0000000000002020 RSI: 000000002001b640 RDI: 0000000000000006 [ 430.200081][ T30] RBP: 00007f1999cfe04e R08: 0000000000000006 R09: 0000000000000006 [ 430.208152][ T30] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffef9ec4fac [ 430.216134][ T30] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 430.224214][ T30] [ 430.227302][ T30] [ 430.227302][ T30] Showing all locks held in the system: [ 430.235216][ T30] 1 lock held by khungtaskd/30: [ 430.240144][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 430.250123][ T30] 5 locks held by kworker/u8:2/35: [ 430.255315][ T30] 2 locks held by getty/5592: [ 430.260077][ T30] #0: ffff888034e320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.269996][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 430.280230][ T30] 1 lock held by syz-executor246/5857: [ 430.285729][ T30] #0: ffff888072050148 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 430.297131][ T30] [ 430.299508][ T30] ============================================= [ 430.299508][ T30] [ 430.307969][ T30] NMI backtrace for cpu 1 [ 430.312336][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241126-syzkaller #0 [ 430.321974][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.332035][ T30] Call Trace: [ 430.335337][ T30] [ 430.338272][ T30] dump_stack_lvl+0x241/0x360 [ 430.342986][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.348218][ T30] ? __pfx__printk+0x10/0x10 [ 430.352824][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.357774][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.363269][ T30] ? _printk+0xd5/0x120 [ 430.367436][ T30] ? __pfx__printk+0x10/0x10 [ 430.372034][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.376886][ T30] ? __pfx__printk+0x10/0x10 [ 430.381503][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.387486][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.393604][ T30] watchdog+0xffb/0x1040 [ 430.397886][ T30] ? watchdog+0x1ea/0x1040 [ 430.402315][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.407003][ T30] kthread+0x2f0/0x390 [ 430.411111][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.415832][ T30] ? __pfx_kthread+0x10/0x10 [ 430.420441][ T30] ret_from_fork+0x4b/0x80 [ 430.424868][ T30] ? __pfx_kthread+0x10/0x10 [ 430.429473][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.434272][ T30] [ 430.437455][ T30] Sending NMI from CPU 1 to CPUs 0: [ 430.442890][ C0] NMI backtrace for cpu 0 [ 430.442907][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-next-20241126-syzkaller #0 [ 430.442927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.442939][ C0] Workqueue: events_unbound toggle_allocation_gate [ 430.442970][ C0] RIP: 0010:insn_get_displacement+0x2ca/0x9a0 [ 430.442991][ C0] Code: cb f5 49 bc 00 00 00 00 00 fc ff df e9 12 04 00 00 49 8d 5d 25 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 95 05 00 00 0f b6 1b 31 ff 89 de e8 72 c9 cb f5 85 db [ 430.443006][ C0] RSP: 0018:ffffc90000ab7790 EFLAGS: 00000a07 [ 430.443021][ C0] RAX: 0000000000000000 RBX: ffffc90000ab7945 RCX: dffffc0000000000 [ 430.443034][ C0] RDX: ffff888020a81e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.443046][ C0] RBP: ffffc90000ab794c R08: ffffffff8bd3c21d R09: ffffffff8bd395b6 [ 430.443059][ C0] R10: 0000000000000002 R11: ffff888020a81e00 R12: 1ffff92000156f29 [ 430.443071][ C0] R13: ffffc90000ab7920 R14: 1ffff92000156f2a R15: 0000000000000000 [ 430.443085][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 430.443099][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.443111][ C0] CR2: 00007fbd0e4b4580 CR3: 000000000e736000 CR4: 00000000003526f0 [ 430.443127][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.443138][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.443149][ C0] Call Trace: [ 430.443156][ C0] [ 430.443163][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 430.443187][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.443210][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.443233][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.443262][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.443278][ C0] ? nmi_handle+0x14f/0x5a0 [ 430.443299][ C0] ? nmi_handle+0x2a/0x5a0 [ 430.443320][ C0] ? insn_get_displacement+0x2ca/0x9a0 [ 430.443337][ C0] ? default_do_nmi+0x63/0x160 [ 430.443359][ C0] ? exc_nmi+0x123/0x1f0 [ 430.443380][ C0] ? end_repeat_nmi+0xf/0x53 [ 430.443402][ C0] ? insn_get_prefixes+0xa06/0x1ac0 [ 430.443428][ C0] ? insn_get_displacement+0x15d/0x9a0 [ 430.443446][ C0] ? insn_get_displacement+0x2ca/0x9a0 [ 430.443463][ C0] ? insn_get_displacement+0x2ca/0x9a0 [ 430.443486][ C0] ? insn_get_displacement+0x2ca/0x9a0 [ 430.443504][ C0] [ 430.443509][ C0] [ 430.443519][ C0] insn_get_immediate+0x62/0x11f0 [ 430.443537][ C0] ? insn_get_immediate+0xad4/0x11f0 [ 430.443556][ C0] insn_decode+0x2d6/0x4c0 [ 430.443575][ C0] ? kmem_cache_alloc_lru_noprof+0x88/0x390 [ 430.443602][ C0] text_poke_loc_init+0xed/0x870 [ 430.443629][ C0] ? __jump_label_patch+0x2ca/0x490 [ 430.443655][ C0] ? kmem_cache_alloc_lru_noprof+0x88/0x390 [ 430.443683][ C0] ? __pfx_text_poke_loc_init+0x10/0x10 [ 430.443714][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 430.443733][ C0] ? text_poke_queue+0x12c/0x180 [ 430.443755][ C0] arch_jump_label_transform_queue+0x8f/0x100 [ 430.443785][ C0] __jump_label_update+0x177/0x3a0 [ 430.443814][ C0] ? process_scheduled_works+0x976/0x1850 [ 430.443840][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 430.443868][ C0] static_key_disable+0x1a/0x20 [ 430.443893][ C0] toggle_allocation_gate+0x1bf/0x260 [ 430.443918][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 430.443943][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.443971][ C0] process_scheduled_works+0xa63/0x1850 [ 430.444002][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.444024][ C0] ? assign_work+0x364/0x3d0 [ 430.444043][ C0] worker_thread+0x870/0xd30 [ 430.444068][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.444088][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.444106][ C0] kthread+0x2f0/0x390 [ 430.444126][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.444144][ C0] ? __pfx_kthread+0x10/0x10 [ 430.444165][ C0] ret_from_fork+0x4b/0x80 [ 430.444182][ C0] ? __pfx_kthread+0x10/0x10 [ 430.444203][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.444227][ C0] [ 430.444235][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.344 msecs [ 430.444988][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.854521][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-next-20241126-syzkaller #0 [ 430.864250][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.874316][ T30] Call Trace: [ 430.877604][ T30] [ 430.880544][ T30] dump_stack_lvl+0x241/0x360 [ 430.885254][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.890466][ T30] ? __pfx__printk+0x10/0x10 [ 430.895070][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.901069][ T30] ? vscnprintf+0x5d/0x90 [ 430.905413][ T30] panic+0x349/0x880 [ 430.909321][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.915488][ T30] ? __pfx_panic+0x10/0x10 [ 430.919914][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 430.925300][ T30] ? __irq_work_queue_local+0x137/0x410 [ 430.930860][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 430.936241][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.942403][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 430.948574][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 430.954748][ T30] watchdog+0x103a/0x1040 [ 430.959178][ T30] ? watchdog+0x1ea/0x1040 [ 430.963613][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.968300][ T30] kthread+0x2f0/0x390 [ 430.972388][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.977161][ T30] ? __pfx_kthread+0x10/0x10 [ 430.981769][ T30] ret_from_fork+0x4b/0x80 [ 430.986218][ T30] ? __pfx_kthread+0x10/0x10 [ 430.990825][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.995609][ T30] [ 430.998964][ T30] Kernel Offset: disabled [ 431.003300][ T30] Rebooting in 86400 seconds..