./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3592974176
<...>
Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts.
execve("./syz-executor3592974176", ["./syz-executor3592974176"], 0x7ffc388abda0 /* 10 vars */) = 0
brk(NULL) = 0x5555566d9000
brk(0x5555566d9d00) = 0x5555566d9d00
arch_prctl(ARCH_SET_FS, 0x5555566d9380) = 0
set_tid_address(0x5555566d9650) = 5018
set_robust_list(0x5555566d9660, 24) = 0
rseq(0x5555566d9ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3592974176", 4096) = 28
getrandom("\xd8\xbb\x34\x44\x60\xbc\xb9\x22", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555566d9d00
brk(0x5555566fad00) = 0x5555566fad00
brk(0x5555566fb000) = 0x5555566fb000
mprotect(0x7f497efd9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.b7FeG8", 0700) = 0
chmod("./syzkaller.b7FeG8", 0777) = 0
chdir("./syzkaller.b7FeG8") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555566d9650) = 5020
./strace-static-x86_64: Process 5020 attached
[pid 5020] set_robust_list(0x5555566d9660, 24) = 0
[pid 5020] chdir("./0") = 0
[pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5020] setpgid(0, 0) = 0
[pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5020] write(3, "1000", 4) = 4
[pid 5020] close(3) = 0
[pid 5020] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5020] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=139}, NULL) = 0
[pid 5020] sched_setscheduler(0, SCHED_RR, NULL) = -1 EINVAL (Invalid argument)
[pid 5020] sendmsg(-1, NULL, MSG_NOSIGNAL|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor)
[pid 5020] sendmmsg(-1, NULL, 0, 0) = -1 EBADF (Bad file descriptor)
[pid 5020] memfd_create("syzkaller", 0) = 3
[pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4976b25000
[pid 5020] write(3, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072
[pid 5020] munmap(0x7f4976b25000, 131072) = 0
[pid 5020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5020] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5020] close(3) = 0
[pid 5020] mkdir("./file0", 0777) = 0
[pid 5020] mount("/dev/loop0", "./file0", "exfat", MS_DIRSYNC|MS_POSIXACL|MS_BORN, "") = 0
[pid 5020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5020] chdir("./file0") = 0
[pid 5020] ioctl(4, LOOP_CLR_FD) = 0
[pid 5020] close(4) = 0
[pid 5020] creat("./bus", 000) = 4
[pid 5020] ftruncate(4, 2048) = 0
[pid 5020] openat(AT_FDCWD, "/sys/power/resume", O_RDWR|O_EXCL|O_TRUNC|O_NONBLOCK|O_SYNC|O_NOATIME) = 5
[pid 5020] write(5, "0x0000000000000700", 18) = 18
[pid 5020] exit_group(0) = ?
[pid 5020] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555566da6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[ 46.197622][ T5020] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5020 'syz-executor359'
[ 46.214881][ T5020] loop0: detected capacity change from 0 to 256
[ 46.232025][ T5020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
unlink("./0/binderfs") = 0
[ 75.963876][ T7] cfg80211: failed to load regulatory.db
[ 285.881697][ T27] INFO: task syz-executor359:5018 blocked for more than 143 seconds.
[ 285.893049][ T27] Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0
[ 285.905216][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 285.916006][ T27] task:syz-executor359 state:D stack:27216 pid:5018 ppid:5015 flags:0x00004002
[ 285.928572][ T27] Call Trace:
[ 285.932598][ T27]
[ 285.936892][ T27] __schedule+0xee1/0x59f0
[ 285.943866][ T27] ? lock_acquire+0x1ae/0x510
[ 285.949733][ T27] ? find_held_lock+0x2d/0x110
[ 285.956371][ T27] ? io_schedule_timeout+0x150/0x150
[ 285.963041][ T27] ? mark_held_locks+0x9f/0xe0
[ 285.970392][ T27] ? _raw_spin_unlock_irqrestore+0x4e/0x70
[ 285.978461][ T27] ? lockdep_hardirqs_on+0x7d/0x100
[ 285.985883][ T27] ? _raw_spin_unlock_irqrestore+0x3b/0x70
[ 285.994903][ T27] schedule+0xe7/0x1b0
[ 286.000919][ T27] wb_wait_for_completion+0x1ae/0x270
[ 286.008757][ T27] ? wb_writeback+0xa90/0xa90
[ 286.014296][ T27] ? prepare_to_swait_exclusive+0x240/0x240
[ 286.024718][ T27] __writeback_inodes_sb_nr+0x1d8/0x270
[ 286.033413][ T27] ? bdi_split_work_to_wbs+0xfa0/0xfa0
[ 286.039979][ T27] ? __dentry_kill+0x499/0x640
[ 286.048524][ T27] ? get_nr_dirty_inodes+0x176/0x1e0
[ 286.057605][ T27] sync_filesystem+0xb6/0x280
[ 286.063881][ T27] generic_shutdown_super+0x74/0x480
[ 286.071549][ T27] kill_block_super+0x64/0xb0
[ 286.078025][ T27] deactivate_locked_super+0x9a/0x170
[ 286.086355][ T27] deactivate_super+0xde/0x100
[ 286.094830][ T27] cleanup_mnt+0x222/0x3d0
[ 286.102182][ T27] task_work_run+0x14d/0x240
[ 286.108674][ T27] ? task_work_cancel+0x30/0x30
[ 286.116646][ T27] ptrace_notify+0x10c/0x130
[ 286.124302][ T27] syscall_exit_to_user_mode_prepare+0x120/0x220
[ 286.132464][ T27] syscall_exit_to_user_mode+0xd/0x50
[ 286.138730][ T27] do_syscall_64+0x44/0xb0
[ 286.144489][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 286.151218][ T27] RIP: 0033:0x7f497ef65487
[ 286.157259][ T27] RSP: 002b:00007ffdd57d4148 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 286.168919][ T27] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f497ef65487
[ 286.179030][ T27] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdd57d4200
[ 286.190419][ T27] RBP: 00007ffdd57d4200 R08: 0000000000000000 R09: 0000000000000000
[ 286.199396][ T27] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffdd57d5270
[ 286.209173][ T27] R13: 00005555566da6c0 R14: 431bde82d7b634db R15: 00007ffdd57d5290
[ 286.218375][ T27]
[ 286.222172][ T27]
[ 286.222172][ T27] Showing all locks held in the system:
[ 286.230968][ T27] 1 lock held by rcu_tasks_kthre/13:
[ 286.239122][ T27] #0: ffffffff8c9a67f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20
[ 286.252139][ T27] 1 lock held by rcu_tasks_trace/14:
[ 286.260640][ T27] #0: ffffffff8c9a64f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20
[ 286.274023][ T27] 1 lock held by khungtaskd/27:
[ 286.280142][ T27] #0: ffffffff8c9a7400 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340
[ 286.291702][ T27] 3 locks held by kworker/u4:2/34:
[ 286.298503][ T27] 2 locks held by getty/4774:
[ 286.308278][ T27] #0: ffff88802cdfa098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 286.319920][ T27] #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480
[ 286.333134][ T27] 1 lock held by syz-executor359/5018:
[ 286.340056][ T27] #0: ffff88807b0e80e0 (&type->s_umount_key#42){+.+.}-{3:3}, at: deactivate_super+0xd6/0x100
[ 286.352860][ T27]
[ 286.355327][ T27] =============================================
[ 286.355327][ T27]
[ 286.369324][ T27] NMI backtrace for cpu 1
[ 286.374797][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0
[ 286.388487][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 286.400584][ T27] Call Trace:
[ 286.405104][ T27]
[ 286.409085][ T27] dump_stack_lvl+0xd9/0x1b0
[ 286.416842][ T27] nmi_cpu_backtrace+0x277/0x380
[ 286.422801][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0
[ 286.428639][ T27] nmi_trigger_cpumask_backtrace+0x2ac/0x310
[ 286.435027][ T27] watchdog+0xf29/0x11b0
[ 286.439912][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90
[ 286.447363][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90
[ 286.454178][ T27] kthread+0x33a/0x430
[ 286.458545][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 286.465285][ T27] ret_from_fork+0x2c/0x70
[ 286.470388][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 286.477300][ T27] ret_from_fork_asm+0x11/0x20
[ 286.484169][ T27]
[ 286.488057][ T27] Sending NMI from CPU 1 to CPUs 0:
[ 286.493689][ C0] NMI backtrace for cpu 0
[ 286.493706][ C0] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0
[ 286.493722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 286.493734][ C0] Workqueue: writeback wb_workfn (flush-7:0)
[ 286.493897][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[ 286.493944][ C0] Code: a6 27 99 02 66 0f 1f 44 00 00 f3 0f 1e fa 48 8b be b0 01 00 00 e8 b0 ff ff ff 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 0f 1e fa 65 8b 05 dd b0 7d 7e 89 c1 48 8b 34 24 81 e1 00 01 00
[ 286.493957][ C0] RSP: 0018:ffffc90000ab74e8 EFLAGS: 00000206
[ 286.493967][ C0] RAX: 0000000000000000 RBX: ffffea0001c90174 RCX: ffffffff81fa92f9
[ 286.493975][ C0] RDX: ffff8880136fbb80 RSI: 0000000000000000 RDI: 0000000000000005
[ 286.493983][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 286.493990][ C0] R10: 0000000000000003 R11: 1ffffffff1936441 R12: 0000000000000003
[ 286.493998][ C0] R13: 0000000000000200 R14: 0000000000000003 R15: ffffea0001c90140
[ 286.494009][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 286.494022][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 286.494030][ C0] CR2: 000055fded888928 CR3: 0000000028191000 CR4: 0000000000350ef0
[ 286.494038][ C0] Call Trace:
[ 286.494047][ C0]
[ 286.494058][ C0] ? nmi_cpu_backtrace+0x1d4/0x380
[ 286.494077][ C0] ? kcov_close+0x20/0x20
[ 286.494094][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10
[ 286.494122][ C0] ? nmi_handle+0x145/0x400
[ 286.494145][ C0] ? irqentry_nmi_enter+0x7f/0x90
[ 286.494171][ C0] ? kcov_close+0x20/0x20
[ 286.494187][ C0] ? default_do_nmi+0x69/0x160
[ 286.494201][ C0] ? exc_nmi+0x171/0x1e0
[ 286.494214][ C0] ? end_repeat_nmi+0x16/0x31
[ 286.494237][ C0] ? __getblk_slow+0x4a9/0x720
[ 286.494270][ C0] ? kcov_close+0x20/0x20
[ 286.494286][ C0] ? kcov_close+0x20/0x20
[ 286.494303][ C0] ? kcov_close+0x20/0x20
[ 286.494319][ C0]
[ 286.494323][ C0]
[ 286.494326][ C0] __getblk_slow+0x4b7/0x720
[ 286.494348][ C0] __bread_gfp+0x215/0x310
[ 286.494368][ C0] exfat_get_dentry_set+0x283/0xc10
[ 286.494401][ C0] ? exfat_update_dir_chksum_with_entry_set+0x330/0x330
[ 286.494420][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 286.494474][ C0] ? exfat_write_inode+0x6c/0x130
[ 286.494487][ C0] ? exfat_set_vol_flags+0x23f/0x2f0
[ 286.494504][ C0] __exfat_write_inode+0x2c0/0x9e0
[ 286.494519][ C0] ? exfat_write_end+0x410/0x410
[ 286.494533][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 286.494552][ C0] ? spin_bug+0x1d0/0x1d0
[ 286.494568][ C0] exfat_write_inode+0xad/0x130
[ 286.494582][ C0] __writeback_single_inode+0xa81/0xe70
[ 286.494609][ C0] ? __mark_inode_dirty+0xd50/0xd50
[ 286.494624][ C0] ? _raw_spin_unlock+0x28/0x40
[ 286.494657][ C0] ? wbc_attach_and_unlock_inode+0x568/0x910
[ 286.494674][ C0] writeback_sb_inodes+0x599/0x1010
[ 286.494696][ C0] ? _raw_spin_unlock+0x28/0x40
[ 286.494713][ C0] ? sync_inode_metadata+0xe0/0xe0
[ 286.494733][ C0] ? rcu_is_watching+0x12/0xb0
[ 286.494768][ C0] ? queue_io+0x3ed/0x4e0
[ 286.494784][ C0] wb_writeback+0x2a5/0xa90
[ 286.494803][ C0] ? __writeback_inodes_wb+0x2d0/0x2d0
[ 286.494819][ C0] ? reacquire_held_locks+0x4b0/0x4b0
[ 286.494836][ C0] ? mark_held_locks+0x9f/0xe0
[ 286.494852][ C0] wb_workfn+0x29c/0xfd0
[ 286.494871][ C0] ? inode_wait_for_writeback+0x30/0x30
[ 286.494891][ C0] ? lock_sync+0x190/0x190
[ 286.494906][ C0] ? reacquire_held_locks+0x4b0/0x4b0
[ 286.494922][ C0] ? spin_bug+0x1d0/0x1d0
[ 286.494940][ C0] process_one_work+0xaa2/0x16f0
[ 286.494968][ C0] ? lock_sync+0x190/0x190
[ 286.494982][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 286.494998][ C0] ? spin_bug+0x1d0/0x1d0
[ 286.495015][ C0] worker_thread+0x687/0x1110
[ 286.495034][ C0] ? process_one_work+0x16f0/0x16f0
[ 286.495048][ C0] kthread+0x33a/0x430
[ 286.495064][ C0] ? kthread_complete_and_exit+0x40/0x40
[ 286.495077][ C0] ret_from_fork+0x2c/0x70
[ 286.495098][ C0] ? kthread_complete_and_exit+0x40/0x40
[ 286.495112][ C0] ret_from_fork_asm+0x11/0x20
[ 286.495143][ C0]
[ 286.495150][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.463 msecs
[ 286.500485][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 287.021307][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc6-syzkaller-00036-g4853c74bd7ab #0
[ 287.034203][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 287.048677][ T27] Call Trace:
[ 287.052187][ T27]
[ 287.057130][ T27] dump_stack_lvl+0xd9/0x1b0
[ 287.065104][ T27] panic+0x6a4/0x750
[ 287.072516][ T27] ? panic_smp_self_stop+0xa0/0xa0
[ 287.082654][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0
[ 287.092448][ T27] ? preempt_schedule_thunk+0x1a/0x30
[ 287.100236][ T27] ? watchdog+0xce1/0x11b0
[ 287.108220][ T27] watchdog+0xcf2/0x11b0
[ 287.115343][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90
[ 287.124715][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90
[ 287.133364][ T27] kthread+0x33a/0x430
[ 287.138751][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 287.147408][ T27] ret_from_fork+0x2c/0x70
[ 287.153195][ T27] ? kthread_complete_and_exit+0x40/0x40
[ 287.160095][ T27] ret_from_fork_asm+0x11/0x20
[ 287.167144][ T27]
[ 287.171415][ T27] Kernel Offset: disabled
[ 287.181493][ T27] Rebooting in 86400 seconds..