./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor386082191 <...> Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. execve("./syz-executor386082191", ["./syz-executor386082191"], 0x7fff87e35600 /* 10 vars */) = 0 brk(NULL) = 0x555555f58000 brk(0x555555f58d00) = 0x555555f58d00 arch_prctl(ARCH_SET_FS, 0x555555f58380) = 0 set_tid_address(0x555555f58650) = 5013 set_robust_list(0x555555f58660, 24) = 0 rseq(0x555555f58ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor386082191", 4096) = 27 getrandom("\xe5\x20\x1c\x3b\xd0\xfb\xa1\x49", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f58d00 brk(0x555555f79d00) = 0x555555f79d00 brk(0x555555f7a000) = 0x555555f7a000 mprotect(0x7fe4993b3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.m80Qop", 0700) = 0 chmod("./syzkaller.m80Qop", 0777) = 0 chdir("./syzkaller.m80Qop") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f58650) = 5014 ./strace-static-x86_64: Process 5014 attached [pid 5014] set_robust_list(0x555555f58660, 24) = 0 [pid 5014] chdir("./0") = 0 [pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] setpgid(0, 0) = 0 [pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5014] write(3, "1000", 4) = 4 [pid 5014] close(3) = 0 [pid 5014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5014] memfd_create("syzkaller", 0) = 3 [pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe490eff000 [pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 5014] munmap(0x7fe490eff000, 262144) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5014] close(3) = 0 [pid 5014] mkdir("./file1", 0777) = 0 [ 56.254707][ T5014] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5014 'syz-executor386' [ 56.274693][ T5014] loop0: detected capacity change from 0 to 512 [ 56.297311][ T5014] EXT4-fs (loop0): 1 orphan inode deleted [pid 5014] mount("/dev/loop0", "./file1", "ext4", MS_REC, ",errors=continue") = 0 [pid 5014] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5014] chdir("./file1") = 0 [pid 5014] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] close(4) = 0 [pid 5014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5014] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.598811][ T28] task:syz-executor386 state:D stack:24968 pid:5013 ppid:5010 flags:0x00004002 [ 286.608493][ T28] Call Trace: [ 286.612119][ T28] [ 286.615087][ T28] __schedule+0x1873/0x48f0 [ 286.620145][ T28] ? mark_lock+0x9a/0x340 [ 286.624588][ T28] ? release_firmware_map_entry+0x190/0x190 [ 286.630956][ T28] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.636970][ T28] ? _raw_spin_unlock+0x40/0x40 [ 286.642321][ T28] ? prepare_to_wait_event+0x3b2/0x3f0 [ 286.647850][ T28] schedule+0xc3/0x180 [ 286.652344][ T28] wb_wait_for_completion+0x166/0x290 [ 286.657813][ T28] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 286.664822][ T28] ? __down_write_common+0x161/0x200 [ 286.670442][ T28] ? wake_bit_function+0x220/0x220 [ 286.675605][ T28] ? dquot_writeback_dquots+0xb38/0xc10 [ 286.681611][ T28] sync_inodes_sb+0x297/0xab0 [ 286.686340][ T28] ? filemap_fdatawrite_wbc+0xb3/0x180 [ 286.692219][ T28] ? filemap_flush+0x11e/0x170 [ 286.697026][ T28] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 286.703453][ T28] ? __static_call_return0+0x9/0x10 [ 286.708704][ T28] ? get_nr_dirty_inodes+0x1c7/0x210 [ 286.714159][ T28] sync_filesystem+0x16f/0x220 [ 286.718957][ T28] generic_shutdown_super+0x6f/0x340 [ 286.724372][ T28] kill_block_super+0x68/0xa0 [ 286.729128][ T28] deactivate_locked_super+0xa4/0x110 [ 286.734648][ T28] cleanup_mnt+0x426/0x4c0 [ 286.739104][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.744416][ T28] task_work_run+0x24a/0x300 [ 286.749070][ T28] ? dput+0x3a1/0x420 [ 286.753182][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 286.758251][ T28] ? __x64_sys_umount+0x126/0x170 [ 286.763377][ T28] ptrace_notify+0x2cd/0x380 [ 286.768001][ T28] ? do_notify_parent+0xf50/0xf50 [ 286.773326][ T28] ? user_path_at_empty+0x12f/0x180 [ 286.778578][ T28] ? __x64_sys_umount+0x126/0x170 [ 286.784002][ T28] ? path_umount+0xf40/0xf40 [ 286.788641][ T28] ? syscall_enter_from_user_mode+0x32/0x230 [ 286.795141][ T28] syscall_exit_to_user_mode+0x157/0x280 [ 286.801175][ T28] do_syscall_64+0x4d/0xc0 [ 286.805638][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.812147][ T28] RIP: 0033:0x7fe49933f507 [ 286.816602][ T28] RSP: 002b:00007ffc0fbd7288 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 286.819871][ T41] EXT4-fs error: 17693 callbacks suppressed [ 286.819884][ T41] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:2: mark_inode_dirty error [ 286.825561][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe49933f507 [ 286.831482][ T41] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5718: Out of memory [ 286.842709][ T28] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc0fbd7340 [ 286.850774][ T41] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:2: mark_inode_dirty error [ 286.859536][ T28] RBP: 00007ffc0fbd7340 R08: 0000000000000000 R09: 0000000000000000 [ 286.867853][ T41] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5718: Out of memory [ 286.879420][ T28] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc0fbd83b0 [ 286.887426][ T41] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:2: mark_inode_dirty error [ 286.896205][ T28] R13: 0000555555f596c0 R14: 431bde82d7b634db R15: 00007ffc0fbd83d0 [ 286.904461][ T41] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5718: Out of memory [ 286.916988][ T28] [ 286.934144][ T41] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:2: mark_inode_dirty error [ 286.937185][ T28] [ 286.937185][ T28] Showing all locks held in the system: [ 286.956273][ T28] 1 lock held by rcu_tasks_kthre/13: [ 286.956422][ T41] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5718: Out of memory [ 286.962018][ T28] #0: ffffffff8d328af0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 286.970987][ T41] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:2: mark_inode_dirty error [ 286.981510][ T28] 1 lock held by rcu_tasks_trace/14: [ 286.993169][ T41] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5718: Out of memory [ 286.998207][ T28] #0: ffffffff8d328eb0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 287.018301][ T28] 1 lock held by khungtaskd/28: [ 287.023449][ T28] #0: ffffffff8d328920 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 287.032910][ T28] 4 locks held by kworker/u4:2/41: [ 287.038040][ T28] #0: ffff8880128ee938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7e3/0x12c0 [ 287.048901][ T28] #1: ffffc90000b27d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x82b/0x12c0 [ 287.060889][ T28] #2: ffff88807c094bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x1bd/0x3e0 [ 287.071875][ T28] #3: ffff888076550288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x959/0x1cb0 [ 287.082197][ T28] 2 locks held by getty/4765: [ 287.086921][ T28] #0: ffff8880298dc098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.097243][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b1/0x1dc0 [ 287.107766][ T28] 2 locks held by syz-executor386/5013: [ 287.113617][ T28] #0: ffff88807c0960e0 (&type->s_umount_key#30){++++}-{3:3}, at: deactivate_super+0xad/0xf0 [ 287.124160][ T28] #1: ffff88801fed27d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x278/0xab0 [ 287.134658][ T28] [ 287.137014][ T28] ============================================= [ 287.137014][ T28] [ 287.145993][ T28] NMI backtrace for cpu 1 [ 287.150350][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc1-syzkaller-00033-geb26cbb1a754 #0 [ 287.160181][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 287.170258][ T28] Call Trace: [ 287.173557][ T28] [ 287.176507][ T28] dump_stack_lvl+0x1e7/0x2d0 [ 287.181218][ T28] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.186711][ T28] ? panic+0x770/0x770 [ 287.190812][ T28] ? __irq_work_queue_local+0x137/0x3e0 [ 287.196424][ T28] nmi_cpu_backtrace+0x498/0x4d0 [ 287.201411][ T28] ? vprintk_emit+0x10d/0x1f0 [ 287.206127][ T28] ? nmi_trigger_cpumask_backtrace+0x300/0x300 [ 287.212301][ T28] ? _printk+0xd5/0x120 [ 287.216480][ T28] ? panic+0x770/0x770 [ 287.220575][ T28] ? __wake_up_klogd+0xcc/0x100 [ 287.225453][ T28] ? panic+0x770/0x770 [ 287.229548][ T28] ? __rcu_read_unlock+0x96/0x100 [ 287.234596][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.240714][ T28] nmi_trigger_cpumask_backtrace+0x187/0x300 [ 287.246810][ T28] watchdog+0xec2/0xf00 [ 287.251018][ T28] kthread+0x2b8/0x350 [ 287.255110][ T28] ? hungtask_pm_notify+0x90/0x90 [ 287.260156][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.264781][ T28] ret_from_fork+0x1f/0x30 [ 287.269261][ T28] [ 287.272509][ T28] Sending NMI from CPU 1 to CPUs 0: [ 287.277735][ C0] NMI backtrace for cpu 0 [ 287.277745][ C0] CPU: 0 PID: 47 Comm: kworker/u4:3 Not tainted 6.5.0-rc1-syzkaller-00033-geb26cbb1a754 #0 [ 287.277763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 287.277772][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.277818][ C0] RIP: 0010:load_balance+0x1d30/0x8170 [ 287.277839][ C0] Code: 00 00 44 89 3b 4c 8b bc 24 50 01 00 00 80 bc 24 a7 00 00 00 00 0f 84 59 01 00 00 48 8b 9c 24 c0 00 00 00 48 89 d8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 68 da [ 287.277851][ C0] RSP: 0018:ffffc90000b87080 EFLAGS: 00000802 [ 287.277864][ C0] RAX: 1ffff92000170eb3 RBX: ffffc90000b87598 RCX: dffffc0000000000 [ 287.277876][ C0] RDX: dffffc0000000000 RSI: 1ffff92000170dfc RDI: ffff8880b983c9a0 [ 287.277892][ C0] RBP: ffffc90000b87730 R08: ffffc90000b875df R09: 0000000000000000 [ 287.277903][ C0] R10: ffffc90000b87590 R11: fffff52000170ebc R12: dffffc0000000000 [ 287.277915][ C0] R13: ffffc90000b87520 R14: 0000000000000001 R15: ffffc90000b87528 [ 287.277926][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.277940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.277951][ C0] CR2: 00007fbb9323ba08 CR3: 000000000d130000 CR4: 00000000003506f0 [ 287.277965][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.277975][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.277984][ C0] Call Trace: [ 287.277989][ C0] [ 287.277996][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 287.278013][ C0] ? read_lock_is_recursive+0x20/0x20 [ 287.278034][ C0] ? nmi_trigger_cpumask_backtrace+0x300/0x300 [ 287.278050][ C0] ? unknown_nmi_error+0xc0/0xc0 [ 287.278077][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.278098][ C0] ? nmi_handle+0xf7/0x370 [ 287.278119][ C0] ? load_balance+0x1d30/0x8170 [ 287.278137][ C0] ? default_do_nmi+0x62/0x150 [ 287.278153][ C0] ? exc_nmi+0x11e/0x1f0 [ 287.278169][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.278196][ C0] ? load_balance+0x1d30/0x8170 [ 287.278215][ C0] ? load_balance+0x1d30/0x8170 [ 287.278233][ C0] ? load_balance+0x1d30/0x8170 [ 287.278251][ C0] [ 287.278256][ C0] [ 287.278298][ C0] ? update_blocked_averages+0x16a0/0x16a0 [ 287.278317][ C0] ? rcu_read_lock_sched_held+0x8d/0x130 [ 287.278337][ C0] ? verify_lock_unused+0x140/0x140 [ 287.278361][ C0] ? update_blocked_averages+0x144a/0x16a0 [ 287.278394][ C0] ? read_lock_is_recursive+0x20/0x20 [ 287.278419][ C0] ? local_clock+0x20/0x20 [ 287.278439][ C0] newidle_balance+0x660/0xff0 [ 287.278460][ C0] ? sched_clock+0x10/0x20 [ 287.278480][ C0] ? update_misfit_status+0x7d0/0x7d0 [ 287.278498][ C0] ? enqueue_task_fair+0xcd0/0xcd0 [ 287.278516][ C0] pick_next_task_fair+0x289/0xdc0 [ 287.278535][ C0] __schedule+0x7c6/0x48f0 [ 287.278560][ C0] ? mark_lock+0x9a/0x340 [ 287.278586][ C0] ? release_firmware_map_entry+0x190/0x190 [ 287.278609][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.278627][ C0] ? _raw_spin_unlock+0x40/0x40 [ 287.278646][ C0] ? kthread_data+0x52/0xc0 [ 287.278662][ C0] ? wq_worker_sleeping+0x63/0x2e0 [ 287.278680][ C0] schedule+0xc3/0x180 [ 287.278701][ C0] toggle_allocation_gate+0x16a/0x250 [ 287.278723][ C0] ? show_object+0xa0/0xa0 [ 287.278743][ C0] ? wake_bit_function+0x220/0x220 [ 287.278767][ C0] process_one_work+0x92c/0x12c0 [ 287.278794][ C0] ? worker_detach_from_pool+0x290/0x290 [ 287.278815][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 287.278836][ C0] ? wq_worker_running+0xa1/0x200 [ 287.278854][ C0] worker_thread+0xa63/0x1210 [ 287.278889][ C0] kthread+0x2b8/0x350 [ 287.278904][ C0] ? pr_cont_work+0x5e0/0x5e0 [ 287.278921][ C0] ? kthread_blkcg+0xd0/0xd0 [ 287.278938][ C0] ret_from_fork+0x1f/0x30 [ 287.278964][ C0] [ 287.278970][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.234 msecs [ 287.280031][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.280041][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc1-syzkaller-00033-geb26cbb1a754 #0 [ 287.280059][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 287.280067][ T28] Call Trace: [ 287.280072][ T28] [ 287.280078][ T28] dump_stack_lvl+0x1e7/0x2d0 [ 287.280108][ T28] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.280131][ T28] ? panic+0x770/0x770 [ 287.280156][ T28] ? vscnprintf+0x5d/0x80 [ 287.280178][ T28] panic+0x30f/0x770 [ 287.280197][ T28] ? nmi_trigger_cpumask_backtrace+0x233/0x300 [ 287.280215][ T28] ? __memcpy_flushcache+0x2b0/0x2b0 [ 287.280234][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.280259][ T28] ? nmi_trigger_cpumask_backtrace+0x233/0x300 [ 287.280275][ T28] ? nmi_trigger_cpumask_backtrace+0x2b4/0x300 [ 287.280294][ T28] ? nmi_trigger_cpumask_backtrace+0x2b9/0x300 [ 287.280314][ T28] watchdog+0xf00/0xf00 [ 287.280339][ T28] kthread+0x2b8/0x350 [ 287.280355][ T28] ? hungtask_pm_notify+0x90/0x90 [ 287.280369][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.280393][ T28] ret_from_fork+0x1f/0x30 [ 287.280425][ T28] [ 287.283772][ T28] Kernel Offset: disabled [ 287.782650][ T28] Rebooting in 86400 seconds..