./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1811295708 <...> Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. execve("./syz-executor1811295708", ["./syz-executor1811295708"], 0x7ffdc93943a0 /* 10 vars */) = 0 brk(NULL) = 0x555557253000 brk(0x555557253c40) = 0x555557253c40 arch_prctl(ARCH_SET_FS, 0x555557253300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1811295708", 4096) = 28 brk(0x555557274c40) = 0x555557274c40 brk(0x555557275000) = 0x555557275000 mprotect(0x7fd86e54b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555572535d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4999 attached [pid 4997] <... clone resumed>, child_tidptr=0x5555572535d0) = 4999 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555572535d0) = 5000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x5555572535d0) = 5001 [pid 4997] <... clone resumed>, child_tidptr=0x5555572535d0) = 5002 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5000 attached [pid 4997] <... clone resumed>, child_tidptr=0x5555572535d0) = 5003 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x5555572535d0) = 5004 [pid 4997] <... clone resumed>, child_tidptr=0x5555572535d0) = 5005 ./strace-static-x86_64: Process 5001 attached [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 5001] write(3, "1000", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5001] dup(3) = 4 [pid 5001] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656./strace-static-x86_64: Process 5004 attached [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5004] setpgid(0, 0) = 0 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5002 attached [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5005 attached [pid 5000] <... clone resumed>, child_tidptr=0x5555572535d0) = 5006 [pid 5004] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5003 attached [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5004] write(3, "1000", 4) = 4 [pid 5004] close(3) = 0 [pid 5004] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5004] dup(3) = 4 [pid 5004] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656./strace-static-x86_64: Process 5007 attached [pid 5003] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5005] <... clone resumed>, child_tidptr=0x5555572535d0) = 5007 [pid 5003] <... clone resumed>, child_tidptr=0x5555572535d0) = 5009 [pid 5002] <... clone resumed>, child_tidptr=0x5555572535d0) = 5008 [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5009 attached ) = 0 ./strace-static-x86_64: Process 5006 attached [pid 5007] setpgid(0, 0) = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] <... prctl resumed>) = 0 [pid 5007] <... openat resumed>) = 3 [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] write(3, "1000", 4 [pid 5006] setpgid(0, 0) = 0 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5009] <... prctl resumed>) = 0 [pid 5007] <... write resumed>) = 4 [pid 5009] setpgid(0, 0 [pid 5007] close(3 [pid 5006] <... openat resumed>) = 3 [pid 5007] <... close resumed>) = 0 [pid 5009] <... setpgid resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5006] write(3, "1000", 4) = 4 [pid 5006] close(3./strace-static-x86_64: Process 5008 attached ) = 0 [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5008] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5007] <... openat resumed>) = 3 [pid 5006] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5009] <... openat resumed>) = 3 [pid 5008] <... prctl resumed>) = 0 [pid 5007] dup(3 [pid 5006] <... openat resumed>) = 3 [pid 5009] write(3, "1000", 4 [pid 5008] setpgid(0, 0 [pid 5007] <... dup resumed>) = 4 [pid 5006] dup(3 [pid 5008] <... setpgid resumed>) = 0 [pid 5006] <... dup resumed>) = 4 [pid 5009] <... write resumed>) = 4 [pid 5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5007] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5006] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5009] close(3 [pid 5008] <... openat resumed>) = 3 [pid 5008] write(3, "1000", 4 [pid 5009] <... close resumed>) = 0 [pid 5008] <... write resumed>) = 4 [pid 5008] close(3) = 0 [pid 5008] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5009] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5008] <... openat resumed>) = 3 [pid 5009] <... openat resumed>) = 3 [pid 5008] dup(3 [pid 5009] dup(3 [pid 5008] <... dup resumed>) = 4 [pid 5009] <... dup resumed>) = 4 [pid 5008] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5009] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 4998] kill(-5001, SIGKILL) = 0 [pid 4998] kill(5001, SIGKILL) = 0 [pid 4999] kill(-5004, SIGKILL) = 0 [pid 4999] kill(5004, SIGKILL) = 0 [pid 5000] kill(-5006, SIGKILL) = 0 [pid 5000] kill(5006, SIGKILL) = 0 [pid 5005] kill(-5007, SIGKILL) = 0 [pid 5005] kill(5007, SIGKILL) = 0 [pid 5002] kill(-5008, SIGKILL [pid 5003] kill(-5009, SIGKILL [pid 5002] <... kill resumed>) = 0 [pid 5003] <... kill resumed>) = 0 [pid 5002] kill(5008, SIGKILL [pid 5003] kill(5009, SIGKILL [pid 5002] <... kill resumed>) = 0 [pid 5003] <... kill resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5003] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5003] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5003] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5003] <... fstat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5002] getdents64(3, [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555557254620 /* 2 entries */, 32768) = 48 [pid 5003] <... getdents64 resumed>0x555557254620 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(3, [pid 5003] getdents64(3, [pid 5002] <... getdents64 resumed>0x555557254620 /* 0 entries */, 32768) = 0 [pid 5003] <... getdents64 resumed>0x555557254620 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5003] close(3) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5000] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4999] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] getdents64(3, [pid 4999] <... getdents64 resumed>0x555557254620 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555557254620 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 4998] getdents64(3, [pid 4999] <... getdents64 resumed>0x555557254620 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555557254620 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] close(3 [pid 5005] <... openat resumed>) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5005] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [ 70.541654][ T26] cfg80211: failed to load regulatory.db [pid 5001] <... fallocate resumed>) = ? [pid 5001] +++ killed by SIGKILL +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5001, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3524 /* 35.24 s */} --- [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555572535d0) = 5022 ./strace-static-x86_64: Process 5022 attached [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5022] setpgid(0, 0) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5022] write(3, "1000", 4) = 4 [pid 5022] close(3) = 0 [pid 5022] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5022] dup(3) = 4 [pid 5022] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 4998] kill(-5022, SIGKILL) = 0 [pid 4998] kill(5022, SIGKILL) = 0 [pid 4998] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 4998] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 5004] <... fallocate resumed>) = ? [pid 5004] +++ killed by SIGKILL +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5004, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3457 /* 34.57 s */} --- [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5027 attached , child_tidptr=0x5555572535d0) = 5027 [pid 5027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5027] setpgid(0, 0) = 0 [pid 5027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5027] write(3, "1000", 4) = 4 [pid 5027] close(3) = 0 [pid 5027] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5027] dup(3) = 4 [pid 5027] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 4999] kill(-5027, SIGKILL) = 0 [pid 4999] kill(5027, SIGKILL) = 0 [pid 4999] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 4999] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5006] <... fallocate resumed>) = ? [pid 5006] +++ killed by SIGKILL +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5006, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3467 /* 34.67 s */} --- [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5028 attached , child_tidptr=0x5555572535d0) = 5028 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5028] setpgid(0, 0) = 0 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5028] write(3, "1000", 4) = 4 [pid 5028] close(3) = 0 [pid 5028] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5028] dup(3) = 4 [pid 5028] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5000] kill(-5028, SIGKILL) = 0 [pid 5000] kill(5028, SIGKILL) = 0 [pid 5000] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5000] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5007] <... fallocate resumed>) = ? [pid 5007] +++ killed by SIGKILL +++ [pid 5005] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5007, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3520 /* 35.20 s */} --- [pid 5005] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555572535d0) = 5035 ./strace-static-x86_64: Process 5035 attached [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5035] setpgid(0, 0) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5035] write(3, "1000", 4) = 4 [pid 5035] close(3) = 0 [pid 5035] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5035] dup(3) = 4 [pid 5035] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5005] kill(-5035, SIGKILL) = 0 [pid 5005] kill(5035, SIGKILL) = 0 [pid 5005] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5005] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5005] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 5005] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 5005] close(3) = 0 [pid 5008] <... fallocate resumed>) = ? [pid 5008] +++ killed by SIGKILL +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5008, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=3466 /* 34.66 s */} --- [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555572535d0) = 5036 ./strace-static-x86_64: Process 5036 attached [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5036] setpgid(0, 0) = 0 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5036] write(3, "1000", 4) = 4 [pid 5036] close(3) = 0 [pid 5036] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5036] dup(3) = 4 [pid 5036] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 2251799830470656 [pid 5002] kill(-5036, SIGKILL) = 0 [pid 5002] kill(5036, SIGKILL) = 0 [pid 5002] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5002] getdents64(3, 0x555557254620 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(3, 0x555557254620 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [ 285.575785][ T28] INFO: task syz-executor181:5022 blocked for more than 143 seconds. [ 285.584008][ T28] Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 285.592028][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.600788][ T28] task:syz-executor181 state:D stack:28232 pid:5022 ppid:4998 flags:0x00004004 [ 285.610315][ T28] Call Trace: [ 285.613600][ T28] [ 285.616839][ T28] __schedule+0xc9a/0x5880 [ 285.621546][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 285.627801][ T28] ? print_usage_bug.part.0+0x660/0x660 [ 285.633589][ T28] ? io_schedule_timeout+0x150/0x150 [ 285.639185][ T28] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 285.645402][ T28] schedule+0xde/0x1a0 [ 285.649521][ T28] schedule_preempt_disabled+0x13/0x20 [ 285.655257][ T28] rwsem_down_write_slowpath+0x3e2/0x1220 [ 285.661321][ T28] ? down_timeout+0x90/0x90 [ 285.666179][ T28] ? lock_sync+0x190/0x190 [ 285.670706][ T28] down_write+0x1d2/0x200 [ 285.675307][ T28] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 285.681912][ T28] blkdev_fallocate+0x1e8/0x420 [ 285.687061][ T28] ? blkdev_writepage+0x30/0x30 [ 285.691935][ T28] vfs_fallocate+0x48b/0xe40 [ 285.696800][ T28] __x64_sys_fallocate+0xd3/0x140 [ 285.702083][ T28] do_syscall_64+0x39/0xb0 [ 285.706835][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 285.713050][ T28] RIP: 0033:0x7fd86e4dee29 [ 285.717801][ T28] RSP: 002b:00007ffdefbd91a8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 285.726505][ T28] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007fd86e4dee29 [ 285.734730][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 285.743014][ T28] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 285.751252][ T28] R10: 0008000001002000 R11: 0000000000000246 R12: 000000000000a47a [ 285.760079][ T28] R13: 00007ffdefbd91bc R14: 00007ffdefbd91d0 R15: 00007ffdefbd91c0 [ 285.768182][ T28] [ 285.771455][ T28] INFO: task syz-executor181:5027 blocked for more than 143 seconds. [ 285.784567][ T28] Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 285.792471][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.801422][ T28] task:syz-executor181 state:D stack:27280 pid:5027 ppid:4999 flags:0x00004004 [ 285.810937][ T28] Call Trace: [ 285.814465][ T28] [ 285.817662][ T28] __schedule+0xc9a/0x5880 [ 285.822341][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 285.828600][ T28] ? print_usage_bug.part.0+0x660/0x660 [ 285.834391][ T28] ? io_schedule_timeout+0x150/0x150 [ 285.839855][ T28] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 285.846059][ T28] schedule+0xde/0x1a0 [ 285.850453][ T28] schedule_preempt_disabled+0x13/0x20 [ 285.856236][ T28] rwsem_down_write_slowpath+0x3e2/0x1220 [ 285.862217][ T28] ? down_timeout+0x90/0x90 [ 285.867043][ T28] ? lock_sync+0x190/0x190 [ 285.871745][ T28] down_write+0x1d2/0x200 [ 285.876383][ T28] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 285.882620][ T28] blkdev_fallocate+0x1e8/0x420 [ 285.887549][ T28] ? blkdev_writepage+0x30/0x30 [ 285.892434][ T28] vfs_fallocate+0x48b/0xe40 [ 285.897320][ T28] __x64_sys_fallocate+0xd3/0x140 [ 285.902629][ T28] do_syscall_64+0x39/0xb0 [ 285.907341][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 285.913497][ T28] RIP: 0033:0x7fd86e4dee29 [ 285.918660][ T28] RSP: 002b:00007ffdefbd91a8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 285.927364][ T28] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007fd86e4dee29 [ 285.936127][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 285.944149][ T28] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 285.952455][ T28] R10: 0008000001002000 R11: 0000000000000246 R12: 000000000000a47d [ 285.960692][ T28] R13: 00007ffdefbd91bc R14: 00007ffdefbd91d0 R15: 00007ffdefbd91c0 [ 285.969107][ T28] [ 285.972397][ T28] [ 285.972397][ T28] Showing all locks held in the system: [ 285.980420][ T28] 1 lock held by rcu_tasks_kthre/13: [ 285.986028][ T28] #0: ffffffff8c7984b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 285.996598][ T28] 1 lock held by rcu_tasks_trace/14: [ 286.001975][ T28] #0: ffffffff8c7981b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 286.013259][ T28] 1 lock held by khungtaskd/28: [ 286.018678][ T28] #0: ffffffff8c7990c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 286.029239][ T28] 2 locks held by getty/4752: [ 286.034137][ T28] #0: ffff88814a852098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 286.044236][ T28] #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 286.054627][ T28] 1 lock held by syz-executor181/5009: [ 286.060429][ T28] 1 lock held by syz-executor181/5022: [ 286.066173][ T28] #0: ffff88801a91f6b0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e8/0x420 [ 286.077111][ T28] 1 lock held by syz-executor181/5027: [ 286.082837][ T28] #0: ffff88801a91f6b0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e8/0x420 [ 286.093882][ T28] 1 lock held by syz-executor181/5028: [ 286.099409][ T28] #0: ffff88801a91f6b0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e8/0x420 [ 286.110396][ T28] 1 lock held by syz-executor181/5035: [ 286.116190][ T28] #0: ffff88801a91f6b0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e8/0x420 [ 286.126946][ T28] 1 lock held by syz-executor181/5036: [ 286.132638][ T28] #0: ffff88801a91f6b0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e8/0x420 [ 286.148199][ T28] [ 286.150771][ T28] ============================================= [ 286.150771][ T28] [ 286.159517][ T28] NMI backtrace for cpu 1 [ 286.163856][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 286.173666][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 286.183708][ T28] Call Trace: [ 286.186974][ T28] [ 286.189909][ T28] dump_stack_lvl+0xd9/0x150 [ 286.194487][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 286.199410][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.204591][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 286.210562][ T28] watchdog+0xe16/0x1090 [ 286.214792][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.220779][ T28] kthread+0x344/0x440 [ 286.224837][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.230461][ T28] ret_from_fork+0x1f/0x30 [ 286.234878][ T28] [ 286.237984][ T28] Sending NMI from CPU 1 to CPUs 0: [ 286.243194][ C0] NMI backtrace for cpu 0 [ 286.243203][ C0] CPU: 0 PID: 4442 Comm: klogd Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 286.243217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 286.243224][ C0] RIP: 0010:mark_lock.part.0+0x33/0x1970 [ 286.243246][ C0] Code: 48 ba 00 00 00 00 00 fc ff df 41 54 49 89 f4 55 53 48 81 ec 38 01 00 00 48 8d 5c 24 38 48 89 3c 24 48 c7 44 24 38 b3 8a b5 41 <48> c1 eb 03 48 c7 44 24 40 f8 15 f0 8b 48 8d 04 13 48 c7 44 24 48 [ 286.243258][ C0] RSP: 0018:ffffc9000318f2d8 EFLAGS: 00000096 [ 286.243269][ C0] RAX: 000000000000000c RBX: ffffc9000318f310 RCX: ffff88807df00aac [ 286.243277][ C0] RDX: dffffc0000000000 RSI: ffff88807df00af0 RDI: ffff88807df00000 [ 286.243285][ C0] RBP: ffff88807df00000 R08: 0000000000000000 R09: ffffffff91528d2f [ 286.243293][ C0] R10: fffffbfff22a51a5 R11: 0000000000094001 R12: ffff88807df00af0 [ 286.243301][ C0] R13: 0000000000000008 R14: 0000000000000004 R15: ffff88807df00af0 [ 286.243311][ C0] FS: 00007f89d328a380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 286.243323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.243331][ C0] CR2: 00007fd86e54f130 CR3: 000000002cdcd000 CR4: 0000000000350ef0 [ 286.243339][ C0] Call Trace: [ 286.243343][ C0] [ 286.243346][ C0] ? nmi_cpu_backtrace+0x1d0/0x350 [ 286.243368][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.243381][ C0] ? nmi_handle+0x13d/0x400 [ 286.243401][ C0] ? mark_lock.part.0+0x33/0x1970 [ 286.243418][ C0] ? default_do_nmi+0x6b/0x170 [ 286.243431][ C0] ? exc_nmi+0x171/0x1e0 [ 286.243443][ C0] ? end_repeat_nmi+0x16/0x31 [ 286.243465][ C0] ? mark_lock.part.0+0x33/0x1970 [ 286.243482][ C0] ? mark_lock.part.0+0x33/0x1970 [ 286.243499][ C0] ? mark_lock.part.0+0x33/0x1970 [ 286.243515][ C0] [ 286.243518][ C0] [ 286.243522][ C0] ? mark_lock.part.0+0xee/0x1970 [ 286.243539][ C0] ? print_usage_bug.part.0+0x660/0x660 [ 286.243556][ C0] ? print_usage_bug.part.0+0x660/0x660 [ 286.243573][ C0] ? find_held_lock+0x2d/0x110 [ 286.243588][ C0] ? is_bpf_text_address+0x7b/0x1b0 [ 286.243604][ C0] ? lock_downgrade+0x690/0x690 [ 286.243622][ C0] __lock_acquire+0x907/0x5f30 [ 286.243641][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.243660][ C0] ? print_usage_bug.part.0+0x660/0x660 [ 286.243679][ C0] lock_acquire+0x1b1/0x520 [ 286.243695][ C0] ? debug_check_no_obj_freed+0xcb/0x420 [ 286.243714][ C0] ? lock_sync+0x190/0x190 [ 286.243729][ C0] ? debug_check_no_obj_freed+0x210/0x420 [ 286.243746][ C0] ? lock_downgrade+0x690/0x690 [ 286.243763][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 286.243781][ C0] _raw_spin_lock_irqsave+0x3d/0x60 [ 286.243798][ C0] ? debug_check_no_obj_freed+0xcb/0x420 [ 286.243814][ C0] debug_check_no_obj_freed+0xcb/0x420 [ 286.243833][ C0] free_unref_page_prepare+0x202/0xcb0 [ 286.243854][ C0] free_unref_page+0x33/0x370 [ 286.243873][ C0] qlist_free_all+0x6a/0x170 [ 286.243887][ C0] kasan_quarantine_reduce+0x195/0x220 [ 286.243902][ C0] __kasan_slab_alloc+0x63/0x90 [ 286.243921][ C0] kmem_cache_alloc_node+0x185/0x3e0 [ 286.243939][ C0] __alloc_skb+0x288/0x330 [ 286.243954][ C0] ? __napi_build_skb+0x50/0x50 [ 286.243970][ C0] alloc_skb_with_frags+0x9a/0x6c0 [ 286.243987][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x57b/0xd60 [ 286.244002][ C0] ? lock_downgrade+0x690/0x690 [ 286.244019][ C0] sock_alloc_send_pskb+0x7a7/0x930 [ 286.244040][ C0] ? sk_dst_check+0x460/0x460 [ 286.244058][ C0] ? lock_downgrade+0x690/0x690 [ 286.244074][ C0] ? do_raw_spin_lock+0x124/0x2b0 [ 286.244092][ C0] ? spin_bug+0x1c0/0x1c0 [ 286.244109][ C0] ? __rcu_read_unlock+0x2a0/0x570 [ 286.244123][ C0] unix_dgram_sendmsg+0x41b/0x1950 [ 286.244140][ C0] ? aa_sk_perm+0x31d/0xb10 [ 286.244153][ C0] ? unix_stream_sendpage+0xcc0/0xcc0 [ 286.244172][ C0] ? aa_af_perm+0x240/0x240 [ 286.244185][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.244198][ C0] ? unix_stream_sendpage+0xcc0/0xcc0 [ 286.244212][ C0] sock_sendmsg+0xde/0x190 [ 286.244225][ C0] __sys_sendto+0x23a/0x340 [ 286.244239][ C0] ? __ia32_sys_getpeername+0xb0/0xb0 [ 286.244253][ C0] ? lock_downgrade+0x690/0x690 [ 286.244272][ C0] ? rcu_is_watching+0x12/0xb0 [ 286.244292][ C0] ? xfd_validate_state+0x5d/0x180 [ 286.244306][ C0] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 286.244327][ C0] ? kernel_fpu_begin_mask+0x270/0x270 [ 286.244347][ C0] ? unlock_page_memcg+0x2d0/0x2d0 [ 286.244366][ C0] ? security_capable+0x93/0xc0 [ 286.244380][ C0] __x64_sys_sendto+0xe1/0x1b0 [ 286.244394][ C0] ? syscall_enter_from_user_mode+0x26/0x80 [ 286.244409][ C0] do_syscall_64+0x39/0xb0 [ 286.244428][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.244447][ C0] RIP: 0033:0x7f89d33ec9b5 [ 286.244456][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 286.244468][ C0] RSP: 002b:00007ffc7617f538 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 286.244479][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f89d33ec9b5 [ 286.244486][ C0] RDX: 000000000000004c RSI: 000055fa7fd99a40 RDI: 0000000000000003 [ 286.244494][ C0] RBP: 000055fa7fd95910 R08: 0000000000000000 R09: 0000000000000000 [ 286.244501][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 286.244509][ C0] R13: 00007f89d357a212 R14: 00007ffc7617f638 R15: 0000000000000000 [ 286.244520][ C0] [ 286.244524][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.330 msecs [ 286.245457][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.794404][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 286.804206][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 286.814255][ T28] Call Trace: [ 286.817525][ T28] [ 286.820445][ T28] dump_stack_lvl+0xd9/0x150 [ 286.825035][ T28] panic+0x686/0x730 [ 286.828933][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 286.834064][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.839249][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 286.844624][ T28] ? watchdog+0xbe8/0x1090 [ 286.849041][ T28] watchdog+0xbf9/0x1090 [ 286.853280][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.859255][ T28] kthread+0x344/0x440 [ 286.863315][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.868947][ T28] ret_from_fork+0x1f/0x30 [ 286.873397][ T28] [ 286.877245][ T28] Kernel Offset: disabled [ 286.881556][ T28] Rebooting in 86400 seconds..