./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3627143456 <...> Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. execve("./syz-executor3627143456", ["./syz-executor3627143456"], 0x7ffe9b618920 /* 10 vars */) = 0 brk(NULL) = 0x5555696da000 brk(0x5555696dae00) = 0x5555696dae00 arch_prctl(ARCH_SET_FS, 0x5555696da480) = 0 set_tid_address(0x5555696da750) = 5848 set_robust_list(0x5555696da760, 24) = 0 rseq(0x5555696dada0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3627143456", 4096) = 28 getrandom("\xa4\xf1\xee\x41\x9e\xbc\xde\x31", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555696dae00 brk(0x5555696fbe00) = 0x5555696fbe00 brk(0x5555696fc000) = 0x5555696fc000 mprotect(0x7fc367943000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fc367898a60, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fc3678a1490}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fc367898a60, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fc3678a1490}, NULL, 8) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached , child_tidptr=0x5555696da750) = 5849 [pid 5849] set_robust_list(0x5555696da760, 24) = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] write(1, "executing program\n", 18executing program ) = 18 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc35f400000 [pid 5849] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072 [pid 5849] munmap(0x7fc35f400000, 138412032) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [ 201.240047][ T5849] loop0: detected capacity change from 0 to 256 [ 201.283628][ T5849] ======================================================= [ 201.283628][ T5849] WARNING: The mand mount option has been deprecated and [ 201.283628][ T5849] and is ignored by this kernel. Remove the mand [ 201.283628][ T5849] option from the mount to silence this warning. [ 201.283628][ T5849] ======================================================= [ 201.321141][ T5849] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [pid 5849] mount("/dev/loop0", "./file0", "exfat", MS_SYNCHRONOUS|MS_MANDLOCK|MS_STRICTATIME|MS_LAZYTIME, "") = 0 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file0") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5849] chdir("./file0") = 0 [pid 5849] mkdir("./control", 000) = 0 [pid 5849] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [ 201.333047][ T5849] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 201.349064][ T5849] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [pid 5849] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5849] mkdir("./file1", 0113) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [pid 5849] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5849] mkdirat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5849] mkdir("./bus", 0777) = 0 [pid 5849] mount(NULL, "./bus", 0x200000000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument) [pid 5849] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5849] mkdirat(4, "./bus/file0", 0103) = 0 [pid 5849] renameat2(4, "./bus/file0", 4, "./file0", 0 [pid 5848] kill(-5849, SIGKILL) = 0 [pid 5848] kill(5849, SIGKILL) = 0 [pid 5848] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5848] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5848] getdents64(3, 0x5555696db7f0 /* 2 entries */, 32768) = 48 [pid 5848] getdents64(3, 0x5555696db7f0 /* 0 entries */, 32768) = 0 [pid 5848] close(3) = 0 [ 429.921059][ T31] INFO: task syz-executor362:5849 blocked for more than 143 seconds. [ 429.929251][ T31] Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 [ 429.937099][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.945862][ T31] task:syz-executor362 state:D stack:24280 pid:5849 tgid:5849 ppid:5848 task_flags:0x400140 flags:0x00004006 [ 429.957977][ T31] Call Trace: [ 429.961378][ T31] [ 429.964337][ T31] __schedule+0x1b33/0x51f0 [ 429.968986][ T31] ? schedule+0x163/0x360 [ 429.973474][ T31] ? __pfx___schedule+0x10/0x10 [ 429.978400][ T31] ? schedule+0x90/0x360 [ 429.982745][ T31] ? schedule+0x90/0x360 [ 429.987050][ T31] schedule+0x163/0x360 [ 429.991333][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.996835][ T31] rwsem_down_write_slowpath+0xedd/0x1420 [ 430.002766][ T31] ? rwsem_down_write_slowpath+0xa17/0x1420 [ 430.008727][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 430.015150][ T31] ? __lock_acquire+0xad5/0xd80 [ 430.020086][ T31] ? do_raw_spin_lock+0x151/0x370 [ 430.025269][ T31] down_write+0x1da/0x220 [ 430.029635][ T31] ? __pfx_down_write+0x10/0x10 [ 430.034614][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 430.039851][ T31] vfs_rename+0x6b9/0xf10 [ 430.044321][ T31] ? __pfx_vfs_rename+0x10/0x10 [ 430.049220][ T31] ? bpf_lsm_path_rename+0x9/0x10 [ 430.054375][ T31] do_renameat2+0xc8d/0x1290 [ 430.059018][ T31] ? __pfx_do_renameat2+0x10/0x10 [ 430.064474][ T31] ? getname_flags+0x1e0/0x530 [ 430.069287][ T31] __x64_sys_renameat2+0xce/0xe0 [ 430.074410][ T31] do_syscall_64+0xf3/0x210 [ 430.078947][ T31] ? clear_bhb_loop+0x45/0xa0 [ 430.083809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.089754][ T31] RIP: 0033:0x7fc3678ce519 [ 430.094251][ T31] RSP: 002b:00007ffc519cacb8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 430.102726][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3678ce519 [ 430.110775][ T31] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004 [ 430.118906][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc519cacf0 [ 430.127128][ T31] R10: 00002000000001c0 R11: 0000000000000246 R12: 00007ffc519cacf0 [ 430.135184][ T31] R13: 00007ffc519caf78 R14: 431bde82d7b634db R15: 00007fc36791703b [ 430.143260][ T31] [ 430.146322][ T31] [ 430.146322][ T31] Showing all locks held in the system: [ 430.154135][ T31] 1 lock held by khungtaskd/31: [ 430.159003][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 430.168998][ T31] 2 locks held by getty/5587: [ 430.173831][ T31] #0: ffff8880366f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.183744][ T31] #1: ffffc900036d62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 430.193962][ T31] 6 locks held by syz-executor362/5849: [ 430.199613][ T31] #0: ffff88807f054420 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 430.208943][ T31] #1: ffff88807f054730 (&type->s_vfs_rename_key){+.+.}-{4:4}, at: do_renameat2+0x5d6/0x1290 [ 430.219325][ T31] #2: ffff88807b3e8910 (&sb->s_type->i_mutex_key#14/1){+.+.}-{4:4}, at: lock_two_directories+0x1a8/0x220 [ 430.230780][ T31] #3: ffff88807b2b8910 (&sb->s_type->i_mutex_key#14/5){+.+.}-{4:4}, at: lock_two_directories+0x1d1/0x220 [ 430.242229][ T31] #4: ffff88807b2b82a0 (&sb->s_type->i_mutex_key#14/2){+.+.}-{4:4}, at: vfs_rename+0x63f/0xf10 [ 430.252812][ T31] #5: ffff88807b2b8910 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: vfs_rename+0x6b9/0xf10 [ 430.263307][ T31] [ 430.265677][ T31] ============================================= [ 430.265677][ T31] [ 430.274279][ T31] NMI backtrace for cpu 1 [ 430.274305][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 430.274326][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.274337][ T31] Call Trace: [ 430.274344][ T31] [ 430.274352][ T31] dump_stack_lvl+0x241/0x360 [ 430.274386][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.274413][ T31] ? __pfx__printk+0x10/0x10 [ 430.274449][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 430.274502][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.274527][ T31] ? _printk+0xd5/0x120 [ 430.274550][ T31] ? touch_all_softlockup_watchdogs+0x4a/0xf0 [ 430.274578][ T31] ? __wake_up_klogd+0xcc/0x110 [ 430.274603][ T31] ? __pfx__printk+0x10/0x10 [ 430.274639][ T31] ? debug_show_all_locks+0x30/0x180 [ 430.274669][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.274701][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.274735][ T31] watchdog+0x1058/0x10a0 [ 430.274761][ T31] ? watchdog+0x1ea/0x10a0 [ 430.274791][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.274816][ T31] kthread+0x7b7/0x940 [ 430.274840][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.274865][ T31] ? __pfx_kthread+0x10/0x10 [ 430.274884][ T31] ? __pfx_kthread+0x10/0x10 [ 430.274906][ T31] ? __pfx_kthread+0x10/0x10 [ 430.274927][ T31] ? __pfx_kthread+0x10/0x10 [ 430.274948][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.274977][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 430.274998][ T31] ? __pfx_kthread+0x10/0x10 [ 430.275021][ T31] ret_from_fork+0x4b/0x80 [ 430.275038][ T31] ? __pfx_kthread+0x10/0x10 [ 430.275058][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.275103][ T31] [ 430.275112][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.449862][ C0] NMI backtrace for cpu 0 [ 430.449882][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 430.449902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.449913][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 430.449935][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 5f 20 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 430.449949][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c2 [ 430.449965][ C0] RAX: 5fa1c341e9d1cd00 RBX: ffffffff8197267e RCX: ffffffff8c27d93c [ 430.449978][ C0] RDX: 0000000000000001 RSI: ffffffff8e6356dd RDI: ffffffff8ca0e2e0 [ 430.449989][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 430.450001][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 430.450014][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 430.450025][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 430.450038][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.450050][ C0] CR2: 00005597c9480600 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 430.450065][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.450074][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.450084][ C0] Call Trace: [ 430.450093][ C0] [ 430.450099][ C0] default_idle+0x13/0x20 [ 430.450118][ C0] default_idle_call+0x74/0xb0 [ 430.450138][ C0] do_idle+0x22e/0x5d0 [ 430.450168][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.450192][ C0] ? rest_init+0x31/0x300 [ 430.450217][ C0] ? rest_init+0x31/0x300 [ 430.450235][ C0] cpu_startup_entry+0x42/0x60 [ 430.450259][ C0] rest_init+0x2dc/0x300 [ 430.450279][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 430.450319][ C0] start_kernel+0x484/0x510 [ 430.450346][ C0] x86_64_start_reservations+0x2a/0x30 [ 430.450365][ C0] x86_64_start_kernel+0x66/0x70 [ 430.450381][ C0] common_startup_64+0x13e/0x147 [ 430.450413][ C0] [ 430.450835][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.450855][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 430.450881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.450896][ T31] Call Trace: [ 430.450907][ T31] [ 430.450917][ T31] dump_stack_lvl+0x241/0x360 [ 430.450954][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.450985][ T31] ? __pfx__printk+0x10/0x10 [ 430.451020][ T31] ? vscnprintf+0x5d/0x90 [ 430.451059][ T31] panic+0x349/0x880 [ 430.451090][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.451123][ T31] ? __pfx_panic+0x10/0x10 [ 430.451147][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 430.451184][ T31] ? __irq_work_queue_local+0x137/0x410 [ 430.451216][ T31] ? irq_work_queue+0xca/0x150 [ 430.451244][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.451287][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.451320][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.451353][ T31] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 430.451390][ T31] watchdog+0x1097/0x10a0 [ 430.451420][ T31] ? watchdog+0x1ea/0x10a0 [ 430.451452][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.451480][ T31] kthread+0x7b7/0x940 [ 430.451508][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.451535][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451557][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451580][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451603][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451627][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.451658][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 430.451681][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451706][ T31] ret_from_fork+0x4b/0x80 [ 430.451726][ T31] ? __pfx_kthread+0x10/0x10 [ 430.451750][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.451800][ T31] [ 430.841937][ T31] Kernel Offset: disabled [ 430.846289][ T31] Rebooting in 86400 seconds..