./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4027117409 <...> Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. execve("./syz-executor4027117409", ["./syz-executor4027117409"], 0x7ffc6d0900a0 /* 10 vars */) = 0 brk(NULL) = 0x5555563d6000 brk(0x5555563d6d00) = 0x5555563d6d00 arch_prctl(ARCH_SET_FS, 0x5555563d6380) = 0 set_tid_address(0x5555563d6650) = 5065 set_robust_list(0x5555563d6660, 24) = 0 rseq(0x5555563d6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4027117409", 4096) = 28 getrandom("\x02\x5e\x6a\x55\x63\x1a\xb3\xb8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555563d6d00 brk(0x5555563f7d00) = 0x5555563f7d00 brk(0x5555563f8000) = 0x5555563f8000 mprotect(0x7f1708771000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5067 attached , child_tidptr=0x5555563d6650) = 5067 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] set_robust_list(0x5555563d6660, 24) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... clone resumed>, child_tidptr=0x5555563d6650) = 5068 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached [pid 5068] set_robust_list(0x5555563d6660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555563d6650) = 5069 [pid 5068] <... set_robust_list resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... clone resumed>, child_tidptr=0x5555563d6650) = 5070 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555563d6650) = 5071 ./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x5555563d6660, 24) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555563d6650) = 5072 [pid 5071] setpgid(0, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5070 attached ./strace-static-x86_64: Process 5069 attached ./strace-static-x86_64: Process 5072 attached ) = 3 [pid 5070] set_robust_list(0x5555563d6660, 24 [ 100.105665][ T27] audit: type=1400 audit(1699750739.082:83): avc: denied { execmem } for pid=5065 comm="syz-executor402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.131923][ T27] audit: type=1400 audit(1699750739.112:84): avc: denied { append } for pid=4494 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 5069] set_robust_list(0x5555563d6660, 24 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 ./strace-static-x86_64: Process 5073 attached [pid 5071] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5065] <... clone resumed>, child_tidptr=0x5555563d6650) = 5073 [pid 5073] set_robust_list(0x5555563d6660, 24 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] dup(3) = 4 [pid 5071] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5065] <... clone resumed>, child_tidptr=0x5555563d6650) = 5074 [pid 5073] <... clone resumed>, child_tidptr=0x5555563d6650) = 5075 ./strace-static-x86_64: Process 5075 attached ./strace-static-x86_64: Process 5074 attached [pid 5072] set_robust_list(0x5555563d6660, 24 [pid 5070] <... set_robust_list resumed>) = 0 [pid 5069] <... set_robust_list resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] set_robust_list(0x5555563d6660, 24) = 0 [pid 5069] <... prctl resumed>) = 0 [pid 5072] <... set_robust_list resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] set_robust_list(0x5555563d6660, 24 [pid 5070] <... clone resumed>, child_tidptr=0x5555563d6650) = 5076 [pid 5069] setpgid(0, 0) = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] setpgid(0, 0) = 0 [ 100.156252][ T27] audit: type=1400 audit(1699750739.112:85): avc: denied { open } for pid=4494 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.179682][ T27] audit: type=1400 audit(1699750739.112:86): avc: denied { getattr } for pid=4494 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5077 attached ./strace-static-x86_64: Process 5076 attached [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] set_robust_list(0x5555563d6660, 24 [pid 5075] <... openat resumed>) = 3 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5077] <... prctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5077] setpgid(0, 0 [pid 5075] dup(3 [pid 5077] <... setpgid resumed>) = 0 [pid 5075] <... dup resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5077] <... openat resumed>) = 3 [pid 5076] set_robust_list(0x5555563d6660, 24 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... clone resumed>, child_tidptr=0x5555563d6650) = 5077 [pid 5069] <... openat resumed>) = 3 [pid 5077] write(3, "1000", 4 [pid 5076] <... set_robust_list resumed>) = 0 [pid 5077] <... write resumed>) = 4 [pid 5077] close(3 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... close resumed>) = 0 [pid 5076] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5078 attached [pid 5077] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5069] write(3, "1000", 4 [pid 5077] <... openat resumed>) = 3 [pid 5076] setpgid(0, 0) = 0 [pid 5077] dup(3 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] <... dup resumed>) = 4 [pid 5077] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5076] <... openat resumed>) = 3 [ 100.209769][ T27] audit: type=1400 audit(1699750739.142:87): avc: denied { read write } for pid=5071 comm="syz-executor402" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [pid 5076] write(3, "1000", 4 [pid 5078] set_robust_list(0x5555563d6660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x5555563d6650) = 5078 [pid 5069] <... write resumed>) = 4 [pid 5078] <... set_robust_list resumed>) = 0 [pid 5076] <... write resumed>) = 4 [pid 5069] close(3 [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] close(3 [pid 5069] <... close resumed>) = 0 [pid 5078] <... prctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5078] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5069] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5078] <... setpgid resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5076] dup(3 [pid 5069] dup(3 [pid 5078] write(3, "1000", 4 [pid 5076] <... dup resumed>) = 4 [pid 5078] <... write resumed>) = 4 [pid 5078] close(3) = 0 [pid 5076] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5069] <... dup resumed>) = 4 [pid 5069] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5078] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5078] dup(3) = 4 [ 100.240773][ T27] audit: type=1400 audit(1699750739.142:88): avc: denied { open } for pid=5071 comm="syz-executor402" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [pid 5078] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5068] kill(-5071, SIGKILL) = 0 [pid 5068] kill(5071, SIGKILL [pid 5067] kill(-5069, SIGKILL [pid 5068] <... kill resumed>) = 0 [pid 5067] <... kill resumed>) = 0 [pid 5067] kill(5069, SIGKILL) = 0 [pid 5073] kill(-5075, SIGKILL) = 0 [pid 5073] kill(5075, SIGKILL) = 0 [pid 5070] kill(-5076, SIGKILL) = 0 [pid 5070] kill(5076, SIGKILL) = 0 [pid 5072] kill(-5077, SIGKILL) = 0 [pid 5072] kill(5077, SIGKILL) = 0 [pid 5074] kill(-5078, SIGKILL) = 0 [pid 5074] kill(5078, SIGKILL) = 0 [pid 5068] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] getdents64(3, [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(3, [pid 5073] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] close(3) = 0 [pid 5073] <... getdents64 resumed>0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, 0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5070] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(3, 0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5074] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5072] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 5072] getdents64(3, [pid 5074] <... getdents64 resumed>0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5072] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5071] <... fallocate resumed>) = ? [pid 5071] +++ killed by SIGKILL +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5071, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=7562 /* 75.62 s */} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached , child_tidptr=0x5555563d6650) = 5091 [pid 5091] set_robust_list(0x5555563d6660, 24) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5091] dup(3) = 4 [pid 5091] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5068] kill(-5091, SIGKILL) = 0 [pid 5068] kill(5091, SIGKILL) = 0 [pid 5068] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555563d76f0 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(3, 0x5555563d76f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [ 286.878274][ T28] INFO: task syz-executor402:5069 blocked for more than 143 seconds. [ 286.886950][ T28] Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 286.898212][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.907279][ T28] task:syz-executor402 state:D stack:28528 pid:5069 tgid:5069 ppid:5067 flags:0x00004006 [ 286.919202][ T28] Call Trace: [ 286.923911][ T28] [ 286.928136][ T28] __schedule+0xee2/0x59a0 [ 286.932691][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.949495][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 286.956544][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.976770][ T28] ? schedule+0x1fa/0x270 [ 286.984166][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.989685][ T28] ? rwsem_down_write_slowpath+0x48e/0x12a0 [ 287.008147][ T28] schedule+0xe7/0x270 [ 287.012299][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.017803][ T28] rwsem_down_write_slowpath+0x53d/0x12a0 [ 287.024109][ T28] ? down_timeout+0x90/0x90 [ 287.028794][ T28] ? lock_sync+0x190/0x190 [ 287.033507][ T28] ? preempt_count_sub+0x150/0x150 [ 287.038813][ T28] down_write+0x1d3/0x200 [ 287.043583][ T28] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 287.050054][ T28] ? inode_security+0x101/0x130 [ 287.055454][ T28] ? avc_policy_seqno+0x9/0x10 [ 287.060804][ T28] blkdev_fallocate+0x1e9/0x450 [ 287.066012][ T28] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.071633][ T28] vfs_fallocate+0x46c/0xe50 [ 287.076859][ T28] __x64_sys_fallocate+0xd5/0x140 [ 287.082511][ T28] do_syscall_64+0x3f/0x110 [ 287.087128][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.093193][ T28] RIP: 0033:0x7f17086feb29 [ 287.097631][ T28] RSP: 002b:00007ffdb0140cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.106197][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17086feb29 [ 287.114342][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.122455][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.130611][ T28] R10: 0000400001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.139201][ T28] R13: 00007ffdb0140f18 R14: 00007ffdb0140d20 R15: 00007ffdb0140d10 [ 287.147206][ T28] [ 287.150769][ T28] INFO: task syz-executor402:5076 blocked for more than 143 seconds. [ 287.159409][ T28] Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 287.167038][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.176296][ T28] task:syz-executor402 state:D stack:28528 pid:5076 tgid:5076 ppid:5070 flags:0x00004006 [ 287.187167][ T28] Call Trace: [ 287.190900][ T28] [ 287.194252][ T28] __schedule+0xee2/0x59a0 [ 287.198862][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.204976][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 287.210620][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.215950][ T28] ? schedule+0x1fa/0x270 [ 287.222499][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.228810][ T28] ? rwsem_down_write_slowpath+0x48e/0x12a0 [ 287.235724][ T28] schedule+0xe7/0x270 [ 287.240413][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.246383][ T28] rwsem_down_write_slowpath+0x53d/0x12a0 [ 287.252679][ T28] ? down_timeout+0x90/0x90 [ 287.257663][ T28] ? lock_sync+0x190/0x190 [ 287.262714][ T28] ? preempt_count_sub+0x150/0x150 [ 287.282688][ T28] down_write+0x1d3/0x200 [ 287.288456][ T28] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 287.294484][ T28] ? inode_security+0x101/0x130 [ 287.299749][ T28] ? avc_policy_seqno+0x9/0x10 [ 287.304553][ T28] blkdev_fallocate+0x1e9/0x450 [ 287.310832][ T28] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.317315][ T28] vfs_fallocate+0x46c/0xe50 [ 287.323303][ T28] __x64_sys_fallocate+0xd5/0x140 [ 287.329748][ T28] do_syscall_64+0x3f/0x110 [ 287.335601][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.342812][ T28] RIP: 0033:0x7f17086feb29 [ 287.353837][ T28] RSP: 002b:00007ffdb0140cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.370894][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17086feb29 [ 287.380317][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.389673][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.398923][ T28] R10: 0000400001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.408115][ T28] R13: 00007ffdb0140f18 R14: 00007ffdb0140d20 R15: 00007ffdb0140d10 [ 287.416124][ T28] [ 287.419506][ T28] INFO: task syz-executor402:5077 blocked for more than 143 seconds. [ 287.428161][ T28] Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 287.435375][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.445066][ T28] task:syz-executor402 state:D stack:28528 pid:5077 tgid:5077 ppid:5072 flags:0x00004006 [ 287.456548][ T28] Call Trace: [ 287.461237][ T28] [ 287.485794][ T28] __schedule+0xee2/0x59a0 [ 287.490728][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.497259][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 287.504633][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.510435][ T28] ? schedule+0x1fa/0x270 [ 287.514815][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.520392][ T28] ? rwsem_down_write_slowpath+0x48e/0x12a0 [ 287.526334][ T28] schedule+0xe7/0x270 [ 287.531015][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.536917][ T28] rwsem_down_write_slowpath+0x53d/0x12a0 [ 287.543211][ T28] ? down_timeout+0x90/0x90 [ 287.548217][ T28] ? lock_sync+0x190/0x190 [ 287.553053][ T28] ? preempt_count_sub+0x150/0x150 [ 287.558323][ T28] down_write+0x1d3/0x200 [ 287.563105][ T28] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 287.569603][ T28] ? inode_security+0x101/0x130 [ 287.574990][ T28] ? avc_policy_seqno+0x9/0x10 [ 287.579935][ T28] blkdev_fallocate+0x1e9/0x450 [ 287.584832][ T28] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.590248][ T28] vfs_fallocate+0x46c/0xe50 [ 287.594887][ T28] __x64_sys_fallocate+0xd5/0x140 [ 287.600424][ T28] do_syscall_64+0x3f/0x110 [ 287.604971][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.611582][ T28] RIP: 0033:0x7f17086feb29 [ 287.616435][ T28] RSP: 002b:00007ffdb0140cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.625401][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17086feb29 [ 287.633944][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.642580][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.651041][ T28] R10: 0000400001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.659571][ T28] R13: 00007ffdb0140f18 R14: 00007ffdb0140d20 R15: 00007ffdb0140d10 [ 287.667580][ T28] [ 287.670724][ T28] INFO: task syz-executor402:5078 blocked for more than 144 seconds. [ 287.678942][ T28] Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 287.686571][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.695798][ T28] task:syz-executor402 state:D stack:28160 pid:5078 tgid:5078 ppid:5074 flags:0x00004006 [ 287.707024][ T28] Call Trace: [ 287.710967][ T28] [ 287.714318][ T28] __schedule+0xee2/0x59a0 [ 287.718842][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.725274][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 287.731588][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.737416][ T28] ? schedule+0x1fa/0x270 [ 287.741843][ T28] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.747347][ T28] ? rwsem_down_write_slowpath+0x48e/0x12a0 [ 287.753409][ T28] schedule+0xe7/0x270 [ 287.757519][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.763494][ T28] rwsem_down_write_slowpath+0x53d/0x12a0 [ 287.769824][ T28] ? down_timeout+0x90/0x90 [ 287.774779][ T28] ? lock_sync+0x190/0x190 [ 287.779707][ T28] ? preempt_count_sub+0x150/0x150 [ 287.785243][ T28] down_write+0x1d3/0x200 [ 287.790281][ T28] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 287.796799][ T28] ? inode_security+0x101/0x130 [ 287.802142][ T28] ? avc_policy_seqno+0x9/0x10 [ 287.807024][ T28] blkdev_fallocate+0x1e9/0x450 [ 287.812022][ T28] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.817073][ T28] vfs_fallocate+0x46c/0xe50 [ 287.821758][ T28] __x64_sys_fallocate+0xd5/0x140 [ 287.826819][ T28] do_syscall_64+0x3f/0x110 [ 287.831466][ T28] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.837870][ T28] RIP: 0033:0x7f17086feb29 [ 287.842804][ T28] RSP: 002b:00007ffdb0140cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.851760][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f17086feb29 [ 287.860228][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.868761][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.877280][ T28] R10: 0000400001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.886282][ T28] R13: 00007ffdb0140f18 R14: 00007ffdb0140d20 R15: 00007ffdb0140d10 [ 287.894810][ T28] [ 287.897926][ T28] [ 287.897926][ T28] Showing all locks held in the system: [ 287.905731][ T28] 1 lock held by khungtaskd/28: [ 287.910690][ T28] #0: ffffffff8cfa95e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.921252][ T28] 1 lock held by klogd/4501: [ 287.926285][ T28] 2 locks held by getty/4815: [ 287.931458][ T28] #0: ffff88802921a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.941868][ T28] #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 287.952550][ T28] 1 lock held by syz-executor402/5069: [ 287.958468][ T28] #0: ffff88801b5a6c00 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.969284][ T28] 1 lock held by syz-executor402/5075: [ 287.975188][ T28] 1 lock held by syz-executor402/5076: [ 287.981207][ T28] #0: ffff88801b5a6c00 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.992637][ T28] 1 lock held by syz-executor402/5077: [ 287.998175][ T28] #0: ffff88801b5a6c00 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 288.009375][ T28] 1 lock held by syz-executor402/5078: [ 288.015256][ T28] #0: ffff88801b5a6c00 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 288.026632][ T28] 1 lock held by syz-executor402/5091: [ 288.032607][ T28] #0: ffff88801b5a6c00 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 288.043830][ T28] [ 288.046180][ T28] ============================================= [ 288.046180][ T28] [ 288.055103][ T28] NMI backtrace for cpu 0 [ 288.059447][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 288.069013][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 288.079091][ T28] Call Trace: [ 288.082383][ T28] [ 288.085330][ T28] dump_stack_lvl+0xd9/0x1b0 [ 288.089996][ T28] nmi_cpu_backtrace+0x277/0x380 [ 288.094975][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 288.100209][ T28] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 288.106220][ T28] watchdog+0xf87/0x1210 [ 288.110523][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.116529][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 288.121749][ T28] ? __kthread_parkme+0x14b/0x220 [ 288.126781][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.132771][ T28] kthread+0x33c/0x440 [ 288.136848][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.142054][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.147695][ T28] ret_from_fork+0x45/0x80 [ 288.152151][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.157790][ T28] ret_from_fork_asm+0x11/0x20 [ 288.162599][ T28] [ 288.165747][ T28] Sending NMI from CPU 0 to CPUs 1: [ 288.171012][ C1] NMI backtrace for cpu 1 [ 288.171022][ C1] CPU: 1 PID: 4501 Comm: klogd Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 288.171045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 288.171056][ C1] RIP: 0010:write_comp_data+0x12/0x80 [ 288.171082][ C1] Code: 04 25 00 bd 03 00 48 8b 80 f0 15 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 49 89 d2 49 89 f8 49 89 f1 65 48 8b 14 25 00 bd 03 00 <65> 8b 05 cf 27 7c 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 fc [ 288.171102][ C1] RSP: 0018:ffffc900033cf380 EFLAGS: 00000046 [ 288.171118][ C1] RAX: 0000000080000001 RBX: 0000000080000000 RCX: ffffffff813a8884 [ 288.171132][ C1] RDX: ffff88807c1261c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 288.171145][ C1] RBP: ffffc900033cf648 R08: 0000000000000005 R09: 0000000000000000 [ 288.171158][ C1] R10: 0000000080000000 R11: dffffc0000000000 R12: ffffc900033c8000 [ 288.171172][ C1] R13: ffffc900033d0000 R14: ffffc900033cf650 R15: ffffc900033cf538 [ 288.171186][ C1] FS: 00007f01f5415380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 288.171208][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.171222][ C1] CR2: 00007f760c316b90 CR3: 000000007c07c000 CR4: 00000000003506f0 [ 288.171236][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.171248][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.171261][ C1] Call Trace: [ 288.171266][ C1] [ 288.171272][ C1] ? show_regs+0x8f/0xa0 [ 288.171297][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 288.171330][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 288.171360][ C1] ? nmi_handle+0x1a6/0x570 [ 288.171384][ C1] ? write_comp_data+0x12/0x80 [ 288.171403][ C1] ? default_do_nmi+0x69/0x160 [ 288.171434][ C1] ? exc_nmi+0x186/0x200 [ 288.171462][ C1] ? end_repeat_nmi+0xf/0x2a [ 288.171487][ C1] ? unwind_next_frame+0x1254/0x2390 [ 288.171520][ C1] ? write_comp_data+0x12/0x80 [ 288.171539][ C1] ? write_comp_data+0x12/0x80 [ 288.171558][ C1] ? write_comp_data+0x12/0x80 [ 288.171577][ C1] [ 288.171586][ C1] [ 288.171592][ C1] unwind_next_frame+0x1254/0x2390 [ 288.171624][ C1] ? save_stack+0x160/0x1f0 [ 288.171646][ C1] ? write_profile+0x450/0x450 [ 288.171676][ C1] arch_stack_walk+0xfa/0x170 [ 288.171697][ C1] ? __reset_page_owner+0x5a/0x190 [ 288.171720][ C1] stack_trace_save+0x96/0xd0 [ 288.171750][ C1] ? filter_irq_stacks+0x90/0x90 [ 288.171782][ C1] save_stack+0x160/0x1f0 [ 288.171803][ C1] ? register_early_stack+0xd0/0xd0 [ 288.171824][ C1] ? lock_sync+0x190/0x190 [ 288.171856][ C1] __reset_page_owner+0x5a/0x190 [ 288.171879][ C1] free_unref_page_prepare+0x4f8/0xa90 [ 288.171937][ C1] free_unref_page+0x33/0x3b0 [ 288.171969][ C1] slabs_destroy+0x85/0xc0 [ 288.171995][ C1] ___cache_free+0x2b7/0x420 [ 288.172022][ C1] qlist_free_all+0x4c/0x1b0 [ 288.172043][ C1] kasan_quarantine_reduce+0x18e/0x1d0 [ 288.172065][ C1] __kasan_kmalloc+0x87/0xb0 [ 288.172092][ C1] ? __alloc_skb+0x12b/0x330 [ 288.172183][ C1] __kmalloc_node_track_caller+0x61/0x100 [ 288.172224][ C1] kmalloc_reserve+0xef/0x260 [ 288.172246][ C1] __alloc_skb+0x12b/0x330 [ 288.172268][ C1] ? __napi_build_skb+0x50/0x50 [ 288.172293][ C1] alloc_skb_with_frags+0xe4/0x710 [ 288.172319][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 288.172354][ C1] sock_alloc_send_pskb+0x7e4/0x970 [ 288.172385][ C1] ? lock_acquire+0x1ae/0x510 [ 288.172414][ C1] ? sock_wmalloc+0x120/0x120 [ 288.172443][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 288.172472][ C1] ? do_raw_spin_lock+0x12e/0x2b0 [ 288.172502][ C1] ? spin_bug+0x1d0/0x1d0 [ 288.172532][ C1] unix_dgram_sendmsg+0x464/0x1ca0 [ 288.172603][ C1] ? tomoyo_socket_bind_permission+0x340/0x340 [ 288.172652][ C1] ? unix_stream_connect+0x1830/0x1830 [ 288.172681][ C1] ? unix_stream_connect+0x1830/0x1830 [ 288.172708][ C1] __sock_sendmsg+0xd5/0x180 [ 288.172730][ C1] __sys_sendto+0x255/0x340 [ 288.172753][ C1] ? __ia32_sys_getpeername+0xb0/0xb0 [ 288.172778][ C1] ? reacquire_held_locks+0x4b0/0x4b0 [ 288.172806][ C1] ? preempt_count_sub+0x150/0x150 [ 288.172841][ C1] ? preempt_count_sub+0x150/0x150 [ 288.172877][ C1] __x64_sys_sendto+0xe0/0x1b0 [ 288.172900][ C1] ? syscall_enter_from_user_mode+0x26/0x80 [ 288.172924][ C1] do_syscall_64+0x3f/0x110 [ 288.172953][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 288.172978][ C1] RIP: 0033:0x7f01f55779b5 [ 288.172994][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 288.173013][ C1] RSP: 002b:00007ffed0416848 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 288.173034][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f01f55779b5 [ 288.173049][ C1] RDX: 000000000000005c RSI: 0000555584d7f420 RDI: 0000000000000003 [ 288.173062][ C1] RBP: 0000555584d792c0 R08: 0000000000000000 R09: 0000000000000000 [ 288.173076][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 288.173089][ C1] R13: 00007f01f5705212 R14: 00007ffed0416948 R15: 0000000000000000 [ 288.173105][ C1] [ 288.173113][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.100 msecs [ 288.174461][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 288.698601][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 288.708246][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 288.718997][ T28] Call Trace: [ 288.722279][ T28] [ 288.725211][ T28] dump_stack_lvl+0xd9/0x1b0 [ 288.730623][ T28] panic+0x6dc/0x790 [ 288.734716][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 288.739939][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 288.745427][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 288.750648][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 288.756122][ T28] ? watchdog+0xd3e/0x1210 [ 288.760718][ T28] ? watchdog+0xd31/0x1210 [ 288.765145][ T28] watchdog+0xd4f/0x1210 [ 288.769396][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.775390][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 288.780735][ T28] ? __kthread_parkme+0x14b/0x220 [ 288.785853][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.791854][ T28] kthread+0x33c/0x440 [ 288.795931][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.801227][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.806872][ T28] ret_from_fork+0x45/0x80 [ 288.811318][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.816960][ T28] ret_from_fork_asm+0x11/0x20 [ 288.821741][ T28] [ 288.825015][ T28] Kernel Offset: disabled [ 288.829433][ T28] Rebooting in 86400 seconds..