./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor444210349 <...> Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. execve("./syz-executor444210349", ["./syz-executor444210349"], 0x7ffcb8e7ee70 /* 10 vars */) = 0 brk(NULL) = 0x55556bd60000 brk(0x55556bd60d00) = 0x55556bd60d00 arch_prctl(ARCH_SET_FS, 0x55556bd60380) = 0 set_tid_address(0x55556bd60650) = 5219 set_robust_list(0x55556bd60660, 24) = 0 rseq(0x55556bd60ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor444210349", 4096) = 27 getrandom("\x81\xa7\x67\x07\x1f\x37\x45\xe1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556bd60d00 brk(0x55556bd81d00) = 0x55556bd81d00 brk(0x55556bd82000) = 0x55556bd82000 mprotect(0x7f849e944000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5220 attached , child_tidptr=0x55556bd60650) = 5220 [pid 5220] set_robust_list(0x55556bd60660, 24) = 0 [pid 5219] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5220] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5221 attached [pid 5221] set_robust_list(0x55556bd60660, 24./strace-static-x86_64: Process 5222 attached [pid 5220] <... clone resumed>, child_tidptr=0x55556bd60650) = 5221 [pid 5222] set_robust_list(0x55556bd60660, 24 [pid 5221] <... set_robust_list resumed>) = 0 [pid 5222] <... set_robust_list resumed>) = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5219] <... clone resumed>, child_tidptr=0x55556bd60650) = 5222 [pid 5219] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5222] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] <... prctl resumed>) = 0 [pid 5221] setpgid(0, 0./strace-static-x86_64: Process 5224 attached ./strace-static-x86_64: Process 5223 attached ) = 0 [pid 5219] <... clone resumed>, child_tidptr=0x55556bd60650) = 5223 [pid 5224] set_robust_list(0x55556bd60660, 24 [pid 5223] set_robust_list(0x55556bd60660, 24 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5219] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5224] <... set_robust_list resumed>) = 0 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5222] <... clone resumed>, child_tidptr=0x55556bd60650) = 5224 ./strace-static-x86_64: Process 5225 attached [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5223] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5221] <... openat resumed>) = 3 [pid 5225] set_robust_list(0x55556bd60660, 24 [pid 5224] <... prctl resumed>) = 0 [pid 5224] setpgid(0, 0 [pid 5221] write(3, "1000", 4 [pid 5225] <... set_robust_list resumed>) = 0 [pid 5219] <... clone resumed>, child_tidptr=0x55556bd60650) = 5225 ./strace-static-x86_64: Process 5226 attached [pid 5225] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5224] <... setpgid resumed>) = 0 [pid 5221] <... write resumed>) = 4 [pid 5219] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] set_robust_list(0x55556bd60660, 24 [pid 5223] <... clone resumed>, child_tidptr=0x55556bd60650) = 5226 [pid 5221] close(3./strace-static-x86_64: Process 5228 attached ./strace-static-x86_64: Process 5227 attached executing program [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5221] <... close resumed>) = 0 [pid 5221] write(1, "executing program\n", 18) = 18 [pid 5224] <... openat resumed>) = 3 [pid 5226] <... set_robust_list resumed>) = 0 [pid 5224] write(3, "1000", 4 [pid 5221] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5228] set_robust_list(0x55556bd60660, 24 [pid 5224] <... write resumed>) = 4 [pid 5219] <... clone resumed>, child_tidptr=0x55556bd60650) = 5227 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5227] set_robust_list(0x55556bd60660, 24 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5225] <... clone resumed>, child_tidptr=0x55556bd60650) = 5228 [pid 5224] close(3 [pid 5221] <... openat resumed>) = 3 [pid 5221] dup(3 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5221] <... dup resumed>) = 4 [pid 5221] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072executing program [pid 5228] <... prctl resumed>) = 0 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5226] <... prctl resumed>) = 0 [pid 5224] <... close resumed>) = 0 [pid 5227] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] setpgid(0, 0 [pid 5224] write(1, "executing program\n", 18 [pid 5228] setpgid(0, 0 [pid 5226] <... setpgid resumed>) = 0 [pid 5224] <... write resumed>) = 18 [pid 5228] <... setpgid resumed>) = 0 [pid 5224] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME./strace-static-x86_64: Process 5229 attached [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] <... openat resumed>) = 3 [pid 5229] set_robust_list(0x55556bd60660, 24 [pid 5227] <... clone resumed>, child_tidptr=0x55556bd60650) = 5229 [pid 5226] <... openat resumed>) = 3 [pid 5224] dup(3 [pid 5228] <... openat resumed>) = 3 [pid 5226] write(3, "1000", 4 [pid 5224] <... dup resumed>) = 4 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5224] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5226] <... write resumed>) = 4 [pid 5226] close(3executing program [pid 5229] <... prctl resumed>) = 0 [pid 5226] <... close resumed>) = 0 [pid 5229] setpgid(0, 0 [pid 5226] write(1, "executing program\n", 18 [pid 5229] <... setpgid resumed>) = 0 [pid 5228] write(3, "1000", 4 [pid 5226] <... write resumed>) = 18 [pid 5228] <... write resumed>) = 4 executing program [pid 5228] close(3) = 0 [pid 5228] write(1, "executing program\n", 18) = 18 [pid 5228] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5226] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5229] <... openat resumed>) = 3 [pid 5228] <... openat resumed>) = 3 [pid 5226] <... openat resumed>) = 3 [pid 5229] write(3, "1000", 4 [pid 5226] dup(3 [pid 5229] <... write resumed>) = 4 [pid 5228] dup(3 [pid 5226] <... dup resumed>) = 4 [pid 5229] close(3 [pid 5226] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5229] <... close resumed>) = 0 [pid 5229] write(1, "executing program\n", 18 [pid 5228] <... dup resumed>) = 4 executing program [pid 5229] <... write resumed>) = 18 [pid 5228] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5229] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5229] dup(3) = 4 [pid 5229] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5220] kill(-5221, SIGKILL) = 0 [pid 5220] kill(5221, SIGKILL) = 0 [pid 5222] kill(-5224, SIGKILL) = 0 [pid 5222] kill(5224, SIGKILL) = 0 [pid 5225] kill(-5228, SIGKILL) = 0 [pid 5225] kill(5228, SIGKILL) = 0 [pid 5223] kill(-5226, SIGKILL [pid 5227] kill(-5229, SIGKILL [pid 5223] <... kill resumed>) = 0 [pid 5227] <... kill resumed>) = 0 [pid 5223] kill(5226, SIGKILL [pid 5227] kill(5229, SIGKILL [pid 5223] <... kill resumed>) = 0 [pid 5227] <... kill resumed>) = 0 [pid 5225] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5220] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5222] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5227] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5225] <... openat resumed>) = 3 [pid 5220] <... openat resumed>) = 3 [pid 5225] newfstatat(3, "", [pid 5220] newfstatat(3, "", [pid 5227] newfstatat(3, "", [pid 5225] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5220] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5227] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5225] getdents64(3, [pid 5222] <... openat resumed>) = 3 [pid 5220] getdents64(3, [pid 5227] getdents64(3, [pid 5225] <... getdents64 resumed>0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5222] newfstatat(3, "", [pid 5220] <... getdents64 resumed>0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5227] <... getdents64 resumed>0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5225] getdents64(3, [pid 5222] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5220] getdents64(3, [pid 5227] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5220] <... getdents64 resumed>0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5227] close(3) = 0 [pid 5222] getdents64(3, [pid 5225] <... getdents64 resumed>0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5220] close(3) = 0 [pid 5225] close(3 [pid 5222] <... getdents64 resumed>0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5225] <... close resumed>) = 0 [pid 5222] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5222] close(3) = 0 [pid 5223] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5223] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5223] getdents64(3, 0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5223] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5223] close(3) = 0 [ 76.733000][ T25] cfg80211: failed to load regulatory.db [pid 5221] <... fallocate resumed>) = ? [pid 5221] +++ killed by SIGKILL +++ [pid 5220] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5221, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4987 /* 49.87 s */} --- [pid 5220] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached [pid 5244] set_robust_list(0x55556bd60660, 24 [pid 5220] <... clone resumed>, child_tidptr=0x55556bd60650) = 5244 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setpgid(0, 0) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1000", 4) = 4 [pid 5244] close(3executing program ) = 0 [pid 5244] write(1, "executing program\n", 18) = 18 [pid 5244] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5244] dup(3) = 4 [pid 5244] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5220] kill(-5244, SIGKILL) = 0 [pid 5220] kill(5244, SIGKILL) = 0 [pid 5220] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5220] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5220] getdents64(3, 0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5220] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5220] close(3) = 0 [pid 5224] <... fallocate resumed>) = ? [pid 5224] +++ killed by SIGKILL +++ [pid 5222] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5224, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4926 /* 49.26 s */} --- [pid 5222] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556bd60650) = 5245 ./strace-static-x86_64: Process 5245 attached [pid 5245] set_robust_list(0x55556bd60660, 24) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5245] setpgid(0, 0) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5245] write(3, "1000", 4) = 4 [pid 5245] close(3) = 0 [pid 5245] write(1, "executing program\n", 18) = 18 [pid 5245] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5245] dup(3) = 4 [pid 5245] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5222] kill(-5245, SIGKILL) = 0 [pid 5222] kill(5245, SIGKILL) = 0 [pid 5222] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5222] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5222] getdents64(3, 0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5222] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5222] close(3) = 0 [pid 5226] <... fallocate resumed>) = ? [pid 5226] +++ killed by SIGKILL +++ [pid 5223] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5226, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=5042 /* 50.42 s */} --- [pid 5223] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5252 attached , child_tidptr=0x55556bd60650) = 5252 [pid 5252] set_robust_list(0x55556bd60660, 24) = 0 [pid 5252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5252] setpgid(0, 0) = 0 [pid 5252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 5252] write(3, "1000", 4) = 4 [pid 5252] close(3) = 0 [pid 5252] write(1, "executing program\n", 18) = 18 [pid 5252] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5252] dup(3) = 4 [pid 5252] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 70368760963072 [pid 5223] kill(-5252, SIGKILL) = 0 [pid 5223] kill(5252, SIGKILL) = 0 [pid 5223] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5223] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5223] getdents64(3, 0x55556bd616f0 /* 2 entries */, 32768) = 48 [pid 5223] getdents64(3, 0x55556bd616f0 /* 0 entries */, 32768) = 0 [pid 5223] close(3) = 0 [ 286.623260][ T30] INFO: task syz-executor444:5229 blocked for more than 143 seconds. [ 286.631482][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 286.639947][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.648680][ T30] task:syz-executor444 state:D stack:26816 pid:5229 tgid:5229 ppid:5227 flags:0x00004006 [ 286.659258][ T30] Call Trace: [ 286.662593][ T30] [ 286.665896][ T30] __schedule+0x17ae/0x4a10 [ 286.670822][ T30] ? __pfx___schedule+0x10/0x10 [ 286.676064][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.681547][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.687618][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.694347][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.699487][ T30] ? schedule+0x90/0x320 [ 286.704127][ T30] schedule+0x14b/0x320 [ 286.708317][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.713825][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.719893][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.726195][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.732766][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.738178][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.744611][ T30] down_write+0x1d7/0x220 [ 286.749332][ T30] ? __pfx_down_write+0x10/0x10 [ 286.754634][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.760209][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.765462][ T30] blkdev_fallocate+0x1fc/0x530 [ 286.770338][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 286.775506][ T30] vfs_fallocate+0x553/0x6c0 [ 286.780483][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.785929][ T30] do_syscall_64+0xf3/0x230 [ 286.790773][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.795880][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.802133][ T30] RIP: 0033:0x7f849e8d1b29 [ 286.806916][ T30] RSP: 002b:00007ffe9b315508 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.815734][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f849e8d1b29 [ 286.824120][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.832110][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.840208][ T30] R10: 0000400001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.848566][ T30] R13: 00007ffe9b315728 R14: 00007ffe9b315530 R15: 00007ffe9b315520 [ 286.856952][ T30] [ 286.860365][ T30] INFO: task syz-executor444:5244 blocked for more than 143 seconds. [ 286.868843][ T30] Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 286.876864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.885911][ T30] task:syz-executor444 state:D stack:25552 pid:5244 tgid:5244 ppid:5220 flags:0x00004006 [ 286.896476][ T30] Call Trace: [ 286.900109][ T30] [ 286.903117][ T30] __schedule+0x17ae/0x4a10 [ 286.907668][ T30] ? __pfx___schedule+0x10/0x10 [ 286.912573][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.917959][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.924413][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.931104][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.936601][ T30] ? schedule+0x90/0x320 [ 286.941209][ T30] schedule+0x14b/0x320 [ 286.945773][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.951580][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.957698][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.963688][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.969876][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.975328][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.981707][ T30] down_write+0x1d7/0x220 [ 286.986434][ T30] ? __pfx_down_write+0x10/0x10 [ 286.991666][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.997269][ T30] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.002857][ T30] blkdev_fallocate+0x1fc/0x530 [ 287.008064][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 287.013602][ T30] vfs_fallocate+0x553/0x6c0 [ 287.018228][ T30] __x64_sys_fallocate+0xbd/0x110 [ 287.023307][ T30] do_syscall_64+0xf3/0x230 [ 287.028165][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.032897][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.039145][ T30] RIP: 0033:0x7f849e8d1b29 [ 287.043980][ T30] RSP: 002b:00007ffe9b315508 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.052812][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f849e8d1b29 [ 287.061158][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.069515][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.077876][ T30] R10: 0000400001002000 R11: 0000000000000246 R12: 000000000000e1fe [ 287.086233][ T30] R13: 00007ffe9b31551c R14: 00007ffe9b315530 R15: 00007ffe9b315520 [ 287.094275][ T30] [ 287.097325][ T30] [ 287.097325][ T30] Showing all locks held in the system: [ 287.105161][ T30] 1 lock held by khungtaskd/30: [ 287.110017][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.134948][ T30] 3 locks held by kworker/0:1H/59: [ 287.140871][ T30] 2 locks held by syslogd/4657: [ 287.153422][ T30] #0: ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 287.163762][ T30] #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 287.175574][ T30] 1 lock held by klogd/4664: [ 287.180524][ T30] 2 locks held by getty/4972: [ 287.185258][ T30] #0: ffff88803531a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.195404][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 287.206004][ T30] 1 lock held by syz-executor444/5228: [ 287.211478][ T30] 1 lock held by syz-executor444/5229: [ 287.216971][ T30] #0: ffff888022c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 287.227681][ T30] 1 lock held by syz-executor444/5244: [ 287.233521][ T30] #0: ffff888022c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 287.244592][ T30] 1 lock held by syz-executor444/5245: [ 287.250406][ T30] #0: ffff888022c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 287.261469][ T30] 1 lock held by syz-executor444/5252: [ 287.267370][ T30] #0: ffff888022c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 287.278413][ T30] [ 287.281096][ T30] ============================================= [ 287.281096][ T30] [ 287.289607][ T30] NMI backtrace for cpu 0 [ 287.293948][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 287.304460][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.314525][ T30] Call Trace: [ 287.317808][ T30] [ 287.320744][ T30] dump_stack_lvl+0x241/0x360 [ 287.325440][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.330650][ T30] ? __pfx__printk+0x10/0x10 [ 287.335249][ T30] ? vprintk_emit+0x667/0x7c0 [ 287.339938][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.344978][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.349935][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.355408][ T30] ? _printk+0xd5/0x120 [ 287.359574][ T30] ? __pfx__printk+0x10/0x10 [ 287.364173][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.369042][ T30] ? __pfx__printk+0x10/0x10 [ 287.373644][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.378682][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.384674][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.390675][ T30] watchdog+0xff4/0x1040 [ 287.394935][ T30] ? watchdog+0x1ea/0x1040 [ 287.399366][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.404048][ T30] kthread+0x2f0/0x390 [ 287.408122][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.412800][ T30] ? __pfx_kthread+0x10/0x10 [ 287.417397][ T30] ret_from_fork+0x4b/0x80 [ 287.421805][ T30] ? __pfx_kthread+0x10/0x10 [ 287.426392][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.431160][ T30] [ 287.434268][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.439501][ C1] NMI backtrace for cpu 1 [ 287.439513][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 287.439532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.439541][ C1] RIP: 0010:__asan_memset+0x33/0x50 [ 287.439561][ C1] Code: 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 fd e5 ff ff 84 c0 74 12 48 89 ef 44 89 f6 48 89 da 5b 41 5e <5d> e9 27 80 b9 09 31 c0 5b 41 5e 5d c3 cc cc cc cc 66 2e 0f 1f 84 [ 287.439578][ C1] RSP: 0018:ffffc900001e7598 EFLAGS: 00000202 [ 287.439592][ C1] RAX: ffffc900001e7a01 RBX: ffffc900001e76b8 RCX: ffffffff81413afb [ 287.439605][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900001e76d0 [ 287.439615][ C1] RBP: ffffc900001e76d0 R08: ffffc900001e76df R09: 1ffff9200003cedb [ 287.439627][ C1] R10: dffffc0000000000 R11: fffff5200003cedc R12: ffffc900001e7a38 [ 287.439639][ C1] R13: dffffc0000000000 R14: ffffc900001e76d0 R15: 1ffff9200003ced0 [ 287.439650][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 287.439664][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.439675][ C1] CR2: 000055556bd696f8 CR3: 000000002eb52000 CR4: 00000000003506f0 [ 287.439689][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.439698][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.439708][ C1] Call Trace: [ 287.439714][ C1] [ 287.439720][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.439741][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.439764][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.439783][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.439807][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.439826][ C1] ? nmi_handle+0x14f/0x5a0 [ 287.439840][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.439856][ C1] ? __asan_memset+0x33/0x50 [ 287.439870][ C1] ? default_do_nmi+0x63/0x160 [ 287.439891][ C1] ? exc_nmi+0x123/0x1f0 [ 287.439911][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.439938][ C1] ? unwind_next_frame+0x13ab/0x2a00 [ 287.439961][ C1] ? __asan_memset+0x33/0x50 [ 287.439976][ C1] ? __asan_memset+0x33/0x50 [ 287.439991][ C1] ? __asan_memset+0x33/0x50 [ 287.440005][ C1] [ 287.440010][ C1] [ 287.440016][ C1] unwind_next_frame+0x13ab/0x2a00 [ 287.440043][ C1] ? free_unref_page+0xd19/0xea0 [ 287.440061][ C1] ? free_unref_page+0xd19/0xea0 [ 287.440076][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.440096][ C1] arch_stack_walk+0x151/0x1b0 [ 287.440115][ C1] ? rcu_core+0xafd/0x1830 [ 287.440137][ C1] stack_trace_save+0x118/0x1d0 [ 287.440157][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.440182][ C1] save_stack+0xfb/0x1f0 [ 287.440198][ C1] ? __pfx_save_stack+0x10/0x10 [ 287.440211][ C1] ? free_unref_page+0xd19/0xea0 [ 287.440234][ C1] ? page_ext_get+0x20/0x2a0 [ 287.440252][ C1] __reset_page_owner+0x76/0x430 [ 287.440277][ C1] free_unref_page+0xd19/0xea0 [ 287.440297][ C1] ? rcu_core+0xa86/0x1830 [ 287.440315][ C1] ? __pfx_rcu_free_slab+0x10/0x10 [ 287.440330][ C1] rcu_core+0xafd/0x1830 [ 287.440357][ C1] ? __pfx_rcu_core+0x10/0x10 [ 287.440378][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 287.440392][ C1] ? sched_clock+0x4a/0x70 [ 287.440410][ C1] ? sched_clock_cpu+0x76/0x490 [ 287.440430][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.440452][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.440478][ C1] handle_softirqs+0x2c4/0x970 [ 287.440500][ C1] ? run_ksoftirqd+0xca/0x130 [ 287.440523][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.440542][ C1] ? preempt_schedule+0xe1/0xf0 [ 287.440570][ C1] run_ksoftirqd+0xca/0x130 [ 287.440590][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.440610][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.440632][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 287.440653][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 287.440672][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 287.440691][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 287.440711][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.440731][ C1] smpboot_thread_fn+0x544/0xa30 [ 287.440751][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 287.440774][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.440794][ C1] kthread+0x2f0/0x390 [ 287.440816][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.440835][ C1] ? __pfx_kthread+0x10/0x10 [ 287.440857][ C1] ret_from_fork+0x4b/0x80 [ 287.440878][ C1] ? __pfx_kthread+0x10/0x10 [ 287.440900][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.440929][ C1] [ 287.440936][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.434 msecs [ 287.441920][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.895739][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 287.906229][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.916271][ T30] Call Trace: [ 287.919541][ T30] [ 287.922466][ T30] dump_stack_lvl+0x241/0x360 [ 287.927140][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.932333][ T30] ? __pfx__printk+0x10/0x10 [ 287.936908][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.942892][ T30] ? vscnprintf+0x5d/0x90 [ 287.947217][ T30] panic+0x349/0x860 [ 287.951102][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.957247][ T30] ? __pfx_panic+0x10/0x10 [ 287.962083][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.967446][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.972987][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.978607][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.984752][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.990897][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.997048][ T30] watchdog+0x1033/0x1040 [ 288.001374][ T30] ? watchdog+0x1ea/0x1040 [ 288.005787][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.010455][ T30] kthread+0x2f0/0x390 [ 288.014517][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.019186][ T30] ? __pfx_kthread+0x10/0x10 [ 288.023771][ T30] ret_from_fork+0x4b/0x80 [ 288.028179][ T30] ? __pfx_kthread+0x10/0x10 [ 288.032765][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.037530][ T30] [ 288.040754][ T30] Kernel Offset: disabled [ 288.045072][ T30] Rebooting in 86400 seconds..