ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor3076388538 <...> Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor3076388538", ["ci2-android-6-12-rust/syz-executor3076388538"], 0x7ffe4c092b60 /* 10 vars */) = 0 brk(NULL) = 0x55556d9af000 brk(0x55556d9afd40) = 0x55556d9afd40 arch_prctl(ARCH_SET_FS, 0x55556d9af3c0) = 0 set_tid_address(0x55556d9af690) = 312 set_robust_list(0x55556d9af6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor3076388538", 4096) = 50 getrandom("\xf8\x16\x4d\x58\xa5\x3c\x87\x7f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556d9afd40 brk(0x55556d9d0d40) = 0x55556d9d0d40 brk(0x55556d9d1000) = 0x55556d9d1000 mprotect(0x7f49ac826000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\x4d\x5b\x6f\xee\xb2\x05\xde\x1f", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.R5HCbT", 0700) = 0 chmod("./syzkaller.R5HCbT", 0777) = 0 chdir("./syzkaller.R5HCbT") = 0 mkdir("./0", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d9af690) = 313 ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x55556d9af6a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] chdir("./0") = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 313] write(1, "executing program\n", 18) = 18 executing program [pid 313] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [ 113.266671][ T36] audit: type=1400 audit(1787283926.160:64): avc: denied { execmem } for pid=312 comm="syz-executor307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 313] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 313] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 313] pwrite64(3, "\x02", 1, 4) = 1 [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556d9b0760 /* 4 entries */, 32768) = 104 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 113.300794][ T36] audit: type=1400 audit(1787283926.190:65): avc: denied { mounton } for pid=313 comm="syz-executor307" path="/root/syzkaller.R5HCbT/0/sys" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 113.335173][ T36] audit: type=1400 audit(1787283926.190:66): avc: denied { mount } for pid=313 comm="syz-executor307" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 newfstatat(AT_FDCWD, "./0/sys", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55556d9b87a0 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556d9b87a0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/sys") = 0 getdents64(3, 0x55556d9b0760 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 314 attached , child_tidptr=0x55556d9af690) = 314 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] set_robust_list(0x55556d9af6a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] chdir("./1") = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 314] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 314] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 314] pwrite64(3, "\x02", 1, 4) = 1 [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556d9b0760 /* 4 entries */, 32768) = 104 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 umount2("./1/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/sys", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55556d9b87a0 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556d9b87a0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/sys") = 0 getdents64(3, 0x55556d9b0760 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x55556d9af6a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] chdir("./2") = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 315] write(1, "executing program\n", 18) = 18 executing program [pid 315] mkdirat(AT_FDCWD, "./sys", 0777 [pid 312] <... clone resumed>, child_tidptr=0x55556d9af690) = 315 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] <... mkdirat resumed>) = 0 [pid 315] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 315] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 315] pwrite64(3, "\x02", 1, 4) = 1 [pid 315] exit_group(0) = ? [pid 315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556d9b0760 /* 4 entries */, 32768) = 104 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 umount2("./2/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/sys", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55556d9b87a0 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556d9b87a0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/sys") = 0 getdents64(3, 0x55556d9b0760 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55556d9af6a0, 24) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] chdir("./3") = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [ 113.357393][ T36] audit: type=1400 audit(1787283926.230:67): avc: denied { unmount } for pid=312 comm="syz-executor307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 316] write(1, "executing program\n", 18) = 18 [pid 316] mkdirat(AT_FDCWD, "./sys", 0777 [pid 312] <... clone resumed>, child_tidptr=0x55556d9af690) = 316 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] <... mkdirat resumed>) = 0 [pid 316] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 316] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 316] pwrite64(3, "\x02", 1, 4) = 1 [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556d9b0760 /* 4 entries */, 32768) = 104 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 umount2("./3/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/sys", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55556d9b87a0 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556d9b87a0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/sys") = 0 getdents64(3, 0x55556d9b0760 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x55556d9af6a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] chdir("./4") = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 312] <... clone resumed>, child_tidptr=0x55556d9af690) = 317 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... openat resumed>) = 3 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 317] write(1, "executing program\n", 18) = 18 [pid 317] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 317] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 317] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 317] pwrite64(3, "\x02", 1, 4) = 1 [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556d9b0760 /* 4 entries */, 32768) = 104 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 umount2("./4/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/sys", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x55556d9b87a0 /* 2 entries */, 32768) = 48 getdents64(4, 0x55556d9b87a0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/sys") = 0 getdents64(3, 0x55556d9b0760 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 318 attached , child_tidptr=0x55556d9af690) = 318 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 318] set_robust_list(0x55556d9af6a0, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... set_robust_list resumed>) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] chdir("./5") = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 318] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 318] openat(AT_FDCWD, "./sys/bus/pci/devices/0000:00:03.0/config", O_RDWR) = 3 [pid 318] pwrite64(3, "\x02", 1, 4) = 1 [pid 318] exit_group(0) = ? executing program [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 249.884500][ T37] INFO: task kworker/u8:2:44 blocked for more than 122 seconds. [ 249.892209][ T37] Not tainted syzkaller #0 [ 249.897289][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.906065][ T37] task:kworker/u8:2 state:D stack:0 pid:44 tgid:44 ppid:2 flags:0x00004000 [ 249.916371][ T37] Workqueue: writeback wb_workfn (flush-8:0) [ 249.922654][ T37] Call Trace: [ 249.926003][ T37] [ 249.928962][ T37] __schedule+0x1496/0x20b0 [ 249.933602][ T37] ? __sched_text_start+0x10/0x10 [ 249.938837][ T37] ? __blk_flush_plug+0x425/0x4e0 [ 249.944017][ T37] ? __blk_flush_plug+0x425/0x4e0 [ 249.949165][ T37] ? __cfi___blk_flush_plug+0x10/0x10 [ 249.954612][ T37] ? kthread_data+0x54/0xc0 [ 249.959231][ T37] ? wq_worker_sleeping+0x68/0x260 [ 249.964486][ T37] schedule+0xc5/0x240 [ 249.968610][ T37] io_schedule+0x88/0xe0 [ 249.972878][ T37] bit_wait_io+0x17/0xd0 [ 249.977223][ T37] __wait_on_bit+0xb3/0x2e0 [ 249.981775][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 249.986786][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 249.992298][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 249.997883][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 250.003902][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 250.009612][ T37] ? __kasan_check_write+0x18/0x20 [ 250.014851][ T37] do_get_write_access+0x558/0xd70 [ 250.020034][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 250.026092][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 250.032366][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 250.039106][ T37] ? __kasan_check_read+0x15/0x20 [ 250.044164][ T37] ? ext4_wait_block_bitmap+0x7c/0x2a0 [ 250.049911][ T37] ext4_mb_mark_context+0x1f3/0xee0 [ 250.055248][ T37] ? __cfi_ext4_mb_mark_context+0x10/0x10 [ 250.061074][ T37] ext4_mb_mark_diskspace_used+0x3aa/0x830 [ 250.066987][ T37] ? ext4_discard_allocated_blocks+0x690/0x690 [ 250.073178][ T37] ? ext4_mb_pa_put_free+0x124/0x1c0 [ 250.078528][ T37] ext4_mb_new_blocks+0x840/0x36c0 [ 250.083689][ T37] ? __kmalloc_noprof+0x261/0x510 [ 250.088870][ T37] ? ext4_find_extent+0x1f5/0xd80 [ 250.093946][ T37] ? ext4_ext_search_right+0x49e/0x880 [ 250.099472][ T37] ? ext4_inode_to_goal_block+0x34f/0x4c0 [ 250.105250][ T37] ext4_ext_map_blocks+0x14d9/0x6080 [ 250.110544][ T37] ? stack_depot_save_flags+0x399/0x800 [ 250.116268][ T37] ? kasan_save_track+0x4f/0x80 [ 250.121227][ T37] ? kasan_save_track+0x3e/0x80 [ 250.126150][ T37] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 250.131822][ T37] ? ext4_alloc_io_end_vec+0x42/0x1e0 [ 250.137289][ T37] ? ext4_do_writepages+0x106f/0x39f0 [ 250.142789][ T37] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 250.148509][ T37] ? writeback_sb_inodes+0x6a5/0xfb0 [ 250.153960][ T37] ? __writeback_inodes_wb+0x129/0x280 [ 250.159547][ T37] ? wb_writeback+0x3bb/0x850 [ 250.164415][ T37] ? wb_workfn+0xa03/0xef0 [ 250.168870][ T37] ? process_scheduled_works+0x7f7/0x1060 [ 250.174799][ T37] ? worker_thread+0xc99/0x13f0 [ 250.179687][ T37] ? kthread+0x2c7/0x360 [ 250.183970][ T37] ? ret_from_fork+0x67/0xa0 [ 250.188706][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 250.193709][ T37] ? ext4_es_lookup_extent+0x567/0x900 [ 250.199240][ T37] ext4_map_blocks+0x873/0x17f0 [ 250.204145][ T37] ? __cfi_ext4_map_blocks+0x10/0x10 [ 250.209532][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 250.215218][ T37] ? jbd2__journal_start+0x3c9/0x860 [ 250.220519][ T37] ? ext4_inode_journal_mode+0x392/0x480 [ 250.226336][ T37] ext4_do_writepages+0x1c4a/0x39f0 [ 250.231600][ T37] ? ext4_normal_submit_inode_data_buffers+0x270/0x270 [ 250.238526][ T37] ext4_writepages+0x28c/0x550 [ 250.243332][ T37] ? __cfi_ext4_writepages+0x10/0x10 [ 250.248719][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 250.254187][ T37] ? __cfi_ext4_writepages+0x10/0x10 [ 250.259533][ T37] do_writepages+0x3d7/0x7f0 [ 250.264280][ T37] ? ext4_map_blocks+0xb71/0x17f0 [ 250.269428][ T37] ? ext4_end_io_rsv_work+0x2af/0x640 [ 250.274936][ T37] ? __cfi_do_writepages+0x10/0x10 [ 250.280066][ T37] __writeback_single_inode+0xc8/0xba0 [ 250.285655][ T37] writeback_sb_inodes+0x6a5/0xfb0 [ 250.290822][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 250.296790][ T37] ? __asan_memset+0x39/0x50 [ 250.301411][ T37] ? queue_io+0x690/0x690 [ 250.305813][ T37] ? psi_group_change+0xab6/0x10a0 [ 250.311033][ T37] __writeback_inodes_wb+0x129/0x280 [ 250.316424][ T37] wb_writeback+0x3bb/0x850 [ 250.320975][ T37] ? inode_cgwb_move_to_attached+0x470/0x470 [ 250.327291][ T37] wb_workfn+0xa03/0xef0 [ 250.331565][ T37] ? ttwu_do_activate+0x620/0x620 [ 250.336729][ T37] ? __cfi_wb_workfn+0x10/0x10 [ 250.341526][ T37] ? try_to_wake_up+0x111a/0x1fd0 [ 250.346616][ T37] ? finish_task_switch+0x139/0x770 [ 250.351859][ T37] ? wake_up_process+0x14/0x20 [ 250.356698][ T37] ? kick_pool+0x3b7/0x540 [ 250.361162][ T37] process_scheduled_works+0x7f7/0x1060 [ 250.366815][ T37] worker_thread+0xc99/0x13f0 [ 250.371530][ T37] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 250.377327][ T37] ? __kasan_check_read+0x15/0x20 [ 250.382398][ T37] kthread+0x2c7/0x360 [ 250.386964][ T37] ? __cfi_worker_thread+0x10/0x10 [ 250.392104][ T37] ? __cfi_kthread+0x10/0x10 [ 250.396756][ T37] ret_from_fork+0x67/0xa0 [ 250.401217][ T37] ? __cfi_kthread+0x10/0x10 [ 250.405866][ T37] ret_from_fork_asm+0x1a/0x30 [ 250.410694][ T37] [ 250.413743][ T37] INFO: task jbd2/sda1-8:73 blocked for more than 123 seconds. [ 250.421355][ T37] Not tainted syzkaller #0 [ 250.426338][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.435154][ T37] task:jbd2/sda1-8 state:D stack:0 pid:73 tgid:73 ppid:2 flags:0x00004000 [ 250.445426][ T37] Call Trace: [ 250.448741][ T37] [ 250.451682][ T37] __schedule+0x1496/0x20b0 [ 250.456303][ T37] ? __sched_text_start+0x10/0x10 [ 250.461370][ T37] ? dd_has_work+0x1f3/0x2f0 [ 250.466129][ T37] ? __kasan_check_write+0x18/0x20 [ 250.471266][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 250.476884][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 250.482814][ T37] ? blk_mq_flush_plug_list+0x1517/0x1750 [ 250.488669][ T37] schedule+0xc5/0x240 [ 250.492817][ T37] io_schedule+0x88/0xe0 [ 250.497116][ T37] bit_wait_io+0x17/0xd0 [ 250.501386][ T37] __wait_on_bit+0xb3/0x2e0 [ 250.505939][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 250.510904][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 250.516426][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 250.521414][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 250.527477][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 250.532981][ T37] ? __cfi__raw_write_lock+0x10/0x10 [ 250.538361][ T37] ? _raw_read_unlock+0x16/0x40 [ 250.543248][ T37] __wait_on_buffer+0x5a/0x70 [ 250.548049][ T37] jbd2_journal_commit_transaction+0x2dba/0x5510 [ 250.554655][ T37] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 250.561370][ T37] ? __schedule+0x149e/0x20b0 [ 250.566146][ T37] ? __kasan_check_write+0x18/0x20 [ 250.571347][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 250.576905][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 250.582406][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 250.588401][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 250.594002][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 250.599887][ T37] ? __try_to_del_timer_sync+0x2e8/0x440 [ 250.605680][ T37] kjournald2+0x386/0x6a0 [ 250.610102][ T37] ? __cfi_kjournald2+0x10/0x10 [ 250.615041][ T37] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 250.620444][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 250.626571][ T37] ? __kasan_check_read+0x15/0x20 [ 250.631624][ T37] ? __kthread_parkme+0x12f/0x180 [ 250.636715][ T37] ? schedule+0xc5/0x240 [ 250.641001][ T37] kthread+0x2c7/0x360 [ 250.645127][ T37] ? __cfi_kjournald2+0x10/0x10 [ 250.650094][ T37] ? __cfi_kthread+0x10/0x10 [ 250.654759][ T37] ret_from_fork+0x67/0xa0 [ 250.659237][ T37] ? __cfi_kthread+0x10/0x10 [ 250.663835][ T37] ret_from_fork_asm+0x1a/0x30 [ 250.668695][ T37] [ 250.671750][ T37] INFO: task syz-executor307:312 blocked for more than 123 seconds. [ 250.679801][ T37] Not tainted syzkaller #0 [ 250.684770][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.693437][ T37] task:syz-executor307 state:D stack:0 pid:312 tgid:312 ppid:310 flags:0x00004000 [ 250.703706][ T37] Call Trace: [ 250.707025][ T37] [ 250.709960][ T37] __schedule+0x1496/0x20b0 [ 250.714551][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.720795][ T37] ? __sched_text_start+0x10/0x10 [ 250.725906][ T37] ? __kasan_check_write+0x18/0x20 [ 250.731060][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 250.736591][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 250.742537][ T37] ? folio_mark_accessed+0x35f/0x620 [ 250.747950][ T37] schedule+0xc5/0x240 [ 250.752144][ T37] io_schedule+0x88/0xe0 [ 250.756476][ T37] bit_wait_io+0x17/0xd0 [ 250.760832][ T37] __wait_on_bit+0xb3/0x2e0 [ 250.765494][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 250.770504][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 250.776063][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 250.781068][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 250.787135][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 250.792625][ T37] do_get_write_access+0x558/0xd70 [ 250.797807][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 250.803838][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 250.810111][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 250.816891][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 250.821968][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 250.827678][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 250.833260][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 250.838699][ T37] ext4_dirty_inode+0xc9/0x110 [ 250.843495][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 250.848930][ T37] __mark_inode_dirty+0x24e/0xc50 [ 250.853993][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 250.859649][ T37] ? mnt_get_write_access+0x1e7/0x270 [ 250.865164][ T37] touch_atime+0x2e5/0x470 [ 250.869650][ T37] iterate_dir+0x2db/0x5c0 [ 250.874123][ T37] __se_sys_getdents64+0xf6/0x250 [ 250.879244][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 250.884536][ T37] ? __x64_sys_getdents64+0xa0/0xa0 [ 250.889793][ T37] ? __cfi_filldir64+0x10/0x10 [ 250.894658][ T37] ? __kasan_check_read+0x15/0x20 [ 250.899716][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 250.905871][ T37] __x64_sys_getdents64+0x7f/0xa0 [ 250.910951][ T37] x64_sys_call+0x27d0/0x2ee0 [ 250.915703][ T37] do_syscall_64+0x57/0xf0 [ 250.920161][ T37] ? clear_bhb_loop+0x50/0xa0 [ 250.924925][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.930889][ T37] RIP: 0033:0x7f49ac7b4393 [ 250.935377][ T37] RSP: 002b:00007ffe7cf9f518 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 250.943842][ T37] RAX: ffffffffffffffda RBX: 000055556d9b0730 RCX: 00007f49ac7b4393 [ 250.951885][ T37] RDX: 0000000000008000 RSI: 000055556d9b0760 RDI: 0000000000000003 [ 250.959922][ T37] RBP: 000055556d9b0760 R08: 00007f49ac82b1e0 R09: 0000000000000001 [ 250.967993][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556d9b0734 [ 250.976012][ T37] R13: ffffffffffffffd8 R14: 0000000000000016 R15: 0000000000000006 [ 250.983998][ T37] [ 250.987116][ T37] NMI backtrace for cpu 0 [ 250.987134][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 8b5107c30037f7cfe212f1198c23c0388356dd7c [ 250.987165][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.987176][ T37] Call Trace: [ 250.987182][ T37] [ 250.987190][ T37] __dump_stack+0x21/0x30 [ 250.987223][ T37] dump_stack_lvl+0x140/0x1c0 [ 250.987252][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 250.987283][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 250.987393][ T37] dump_stack+0x19/0x20 [ 250.987423][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 250.987515][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 250.987548][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 250.987578][ T37] ? sched_show_task+0x371/0x530 [ 250.987609][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 250.987649][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.987733][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.987766][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 250.987798][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 250.987830][ T37] watchdog+0xe45/0xf90 [ 250.987898][ T37] ? __kasan_check_write+0x18/0x20 [ 250.987925][ T37] ? __cfi_watchdog+0x10/0x10 [ 250.987950][ T37] ? __kasan_check_read+0x15/0x20 [ 250.987978][ T37] ? __kthread_parkme+0x12f/0x180 [ 250.988002][ T37] ? schedule+0xc5/0x240 [ 250.988035][ T37] kthread+0x2c7/0x360 [ 250.988060][ T37] ? __cfi_watchdog+0x10/0x10 [ 250.988084][ T37] ? __cfi_kthread+0x10/0x10 [ 250.988111][ T37] ret_from_fork+0x67/0xa0 [ 250.988144][ T37] ? __cfi_kthread+0x10/0x10 [ 250.988170][ T37] ret_from_fork_asm+0x1a/0x30 [ 250.988195][ T37] [ 250.988204][ T37] Sending NMI from CPU 0 to CPUs 1: [ 251.159917][ C1] NMI backtrace for cpu 1 [ 251.159934][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 8b5107c30037f7cfe212f1198c23c0388356dd7c [ 251.159956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.159966][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 251.159993][ C1] Code: cc cc cc cc cc cc cc b8 63 ea 9e 9b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 b9 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 251.160007][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 251.160022][ C1] RAX: ffff8881f6f00000 RBX: ffff888103669300 RCX: ffffffff85a4a4fd [ 251.160035][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000001fd7c [ 251.160070][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 251.160082][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 251.160093][ C1] R13: 1ffff110206cd260 R14: dffffc0000000000 R15: ffffffff87ecc9a8 [ 251.160106][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 251.160119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.160131][ C1] CR2: 00007f49ac7fa0fc CR3: 000000010cb4c000 CR4: 00000000003526b0 [ 251.160147][ C1] Call Trace: [ 251.160153][ C1] [ 251.160161][ C1] default_idle+0x17/0x30 [ 251.160183][ C1] arch_cpu_idle+0xd/0x20 [ 251.160202][ C1] default_idle_call+0x3e/0x80 [ 251.160222][ C1] do_idle+0x1df/0x570 [ 251.160332][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 251.160350][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 251.160374][ C1] ? complete+0x172/0x1d0 [ 251.160390][ C1] cpu_startup_entry+0x47/0x60 [ 251.160408][ C1] start_secondary+0x12e/0x140 [ 251.160454][ C1] common_startup_64+0x13b/0x157 [ 251.160488][ C1]