./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3204206630 <...> Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. execve("./syz-executor3204206630", ["./syz-executor3204206630"], 0x7fff908ca7d0 /* 10 vars */) = 0 brk(NULL) = 0x5555557db000 brk(0x5555557dbd00) = 0x5555557dbd00 arch_prctl(ARCH_SET_FS, 0x5555557db380) = 0 set_tid_address(0x5555557db650) = 5016 set_robust_list(0x5555557db660, 24) = 0 rseq(0x5555557dbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3204206630", 4096) = 28 getrandom("\x15\x5c\xff\x6b\x9c\x7f\xb0\x8b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555557dbd00 brk(0x5555557fcd00) = 0x5555557fcd00 brk(0x5555557fd000) = 0x5555557fd000 mprotect(0x7fe63a608000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5017 attached , child_tidptr=0x5555557db650) = 5017 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] set_robust_list(0x5555557db660, 24) = 0 ./strace-static-x86_64: Process 5018 attached [pid 5016] <... clone resumed>, child_tidptr=0x5555557db650) = 5018 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5018] set_robust_list(0x5555557db660, 24) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x5555557db650) = 5019 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5019 attached [pid 5018] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5017] <... clone resumed>, child_tidptr=0x5555557db650) = 5020 ./strace-static-x86_64: Process 5021 attached [pid 5021] set_robust_list(0x5555557db660, 24 [pid 5016] <... clone resumed>, child_tidptr=0x5555557db650) = 5021 ./strace-static-x86_64: Process 5020 attached [pid 5019] set_robust_list(0x5555557db660, 24 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5019] <... set_robust_list resumed>) = 0 [pid 5020] set_robust_list(0x5555557db660, 24 [pid 5018] <... clone resumed>, child_tidptr=0x5555557db650) = 5022 ./strace-static-x86_64: Process 5022 attached [pid 5021] <... set_robust_list resumed>) = 0 [pid 5021] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5019] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... clone resumed>, child_tidptr=0x5555557db650) = 5023 [pid 5019] <... clone resumed>, child_tidptr=0x5555557db650) = 5024 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5020] <... set_robust_list resumed>) = 0 [pid 5016] <... clone resumed>, child_tidptr=0x5555557db650) = 5026 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] set_robust_list(0x5555557db660, 24 [pid 5020] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5026 attached [pid 5022] <... set_robust_list resumed>) = 0 [pid 5020] setpgid(0, 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5020] <... setpgid resumed>) = 0 [pid 5026] set_robust_list(0x5555557db660, 24 [pid 5022] <... prctl resumed>) = 0 [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5021] <... clone resumed>, child_tidptr=0x5555557db650) = 5025 [pid 5020] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5024 attached ./strace-static-x86_64: Process 5023 attached ./strace-static-x86_64: Process 5025 attached [pid 5026] <... set_robust_list resumed>) = 0 [pid 5022] setpgid(0, 0 [pid 5020] write(3, "1000", 4 [pid 5022] <... setpgid resumed>) = 0 [pid 5020] <... write resumed>) = 4 [pid 5026] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5020] close(3 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5020] <... close resumed>) = 0 [pid 5024] set_robust_list(0x5555557db660, 24) = 0 [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5024] setpgid(0, 0 [pid 5020] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5024] <... setpgid resumed>) = 0 [pid 5022] <... openat resumed>) = 3 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5020] <... openat resumed>) = 3 [pid 5022] write(3, "1000", 4 [pid 5024] <... openat resumed>) = 3 [pid 5022] <... write resumed>) = 4 ./strace-static-x86_64: Process 5027 attached [pid 5026] <... clone resumed>, child_tidptr=0x5555557db650) = 5027 [pid 5025] set_robust_list(0x5555557db660, 24 [pid 5024] write(3, "1000", 4 [pid 5023] set_robust_list(0x5555557db660, 24 [pid 5022] close(3 [pid 5020] dup(3 [pid 5025] <... set_robust_list resumed>) = 0 [pid 5022] <... close resumed>) = 0 [pid 5020] <... dup resumed>) = 4 [pid 5027] set_robust_list(0x5555557db660, 24 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5024] <... write resumed>) = 4 [pid 5023] <... set_robust_list resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5020] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5027] <... set_robust_list resumed>) = 0 [pid 5025] <... prctl resumed>) = 0 [pid 5024] close(3 [pid 5023] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5022] <... openat resumed>) = 3 [pid 5024] <... close resumed>) = 0 [pid 5022] dup(3 [pid 5024] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5023] <... clone resumed>, child_tidptr=0x5555557db650) = 5028 [pid 5022] <... dup resumed>) = 4 [pid 5024] <... openat resumed>) = 3 [pid 5022] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064./strace-static-x86_64: Process 5028 attached [pid 5027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5025] setpgid(0, 0 [pid 5024] dup(3 [pid 5028] set_robust_list(0x5555557db660, 24 [pid 5027] <... prctl resumed>) = 0 [pid 5025] <... setpgid resumed>) = 0 [pid 5028] <... set_robust_list resumed>) = 0 [pid 5027] setpgid(0, 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5024] <... dup resumed>) = 4 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5027] <... setpgid resumed>) = 0 [pid 5025] <... openat resumed>) = 3 [pid 5024] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5028] <... prctl resumed>) = 0 [pid 5027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5025] write(3, "1000", 4 [pid 5028] setpgid(0, 0 [pid 5027] <... openat resumed>) = 3 [pid 5025] <... write resumed>) = 4 [pid 5028] <... setpgid resumed>) = 0 [pid 5027] write(3, "1000", 4 [pid 5025] close(3 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5027] <... write resumed>) = 4 [pid 5025] <... close resumed>) = 0 [pid 5028] <... openat resumed>) = 3 [pid 5027] close(3 [pid 5025] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5028] write(3, "1000", 4 [pid 5027] <... close resumed>) = 0 [pid 5025] <... openat resumed>) = 3 [pid 5028] <... write resumed>) = 4 [pid 5027] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5025] dup(3 [pid 5028] close(3 [pid 5027] <... openat resumed>) = 3 [pid 5025] <... dup resumed>) = 4 [pid 5028] <... close resumed>) = 0 [pid 5027] dup(3 [pid 5025] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5028] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5027] <... dup resumed>) = 4 [pid 5028] <... openat resumed>) = 3 [pid 5027] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5028] dup(3) = 4 [pid 5028] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5017] kill(-5020, SIGKILL) = 0 [pid 5017] kill(5020, SIGKILL) = 0 [pid 5018] kill(-5022, SIGKILL) = 0 [pid 5018] kill(5022, SIGKILL) = 0 [pid 5019] kill(-5024, SIGKILL) = 0 [pid 5019] kill(5024, SIGKILL) = 0 [pid 5021] kill(-5025, SIGKILL) = 0 [pid 5021] kill(5025, SIGKILL) = 0 [pid 5026] kill(-5027, SIGKILL) = 0 [pid 5026] kill(5027, SIGKILL) = 0 [pid 5023] kill(-5028, SIGKILL) = 0 [pid 5023] kill(5028, SIGKILL) = 0 [pid 5019] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5019] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5017] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5019] getdents64(3, [pid 5017] <... openat resumed>) = 3 [pid 5019] <... getdents64 resumed>0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5017] newfstatat(3, "", [pid 5019] getdents64(3, [pid 5017] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5019] <... getdents64 resumed>0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5019] close(3 [pid 5017] getdents64(3, [pid 5019] <... close resumed>) = 0 [pid 5017] <... getdents64 resumed>0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5026] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] getdents64(3, [pid 5026] <... openat resumed>) = 3 [pid 5017] <... getdents64 resumed>0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5026] newfstatat(3, "", [pid 5018] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5017] close(3 [pid 5026] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5018] <... openat resumed>) = 3 [pid 5017] <... close resumed>) = 0 [pid 5026] getdents64(3, [pid 5018] newfstatat(3, "", [pid 5026] <... getdents64 resumed>0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5026] getdents64(3, [pid 5018] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5026] <... getdents64 resumed>0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5026] close(3 [pid 5018] getdents64(3, [pid 5026] <... close resumed>) = 0 [pid 5018] <... getdents64 resumed>0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5021] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5018] getdents64(3, [pid 5021] <... openat resumed>) = 3 [pid 5018] <... getdents64 resumed>0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5021] newfstatat(3, "", [pid 5018] close(3 [pid 5021] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5018] <... close resumed>) = 0 [pid 5021] getdents64(3, 0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5021] getdents64(3, 0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5021] close(3) = 0 [pid 5023] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5023] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5023] getdents64(3, 0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5023] getdents64(3, 0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5023] close(3) = 0 [ 81.613312][ T9] cfg80211: failed to load regulatory.db [pid 5020] <... fallocate resumed>) = ? [pid 5020] +++ killed by SIGKILL +++ [pid 5017] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5020, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=6318 /* 63.18 s */} --- [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557db650) = 5046 ./strace-static-x86_64: Process 5046 attached [pid 5046] set_robust_list(0x5555557db660, 24) = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5046] dup(3) = 4 [pid 5046] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5017] kill(-5046, SIGKILL) = 0 [pid 5017] kill(5046, SIGKILL) = 0 [pid 5017] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5017] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5017] getdents64(3, 0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5017] getdents64(3, 0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5017] close(3) = 0 [pid 5022] <... fallocate resumed>) = ? [pid 5022] +++ killed by SIGKILL +++ [pid 5018] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5022, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=6231 /* 62.31 s */} --- [pid 5018] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557db650) = 5052 ./strace-static-x86_64: Process 5052 attached [pid 5052] set_robust_list(0x5555557db660, 24) = 0 [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5052] setpgid(0, 0) = 0 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [pid 5052] close(3) = 0 [pid 5052] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5052] dup(3) = 4 [pid 5052] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 281474993496064 [pid 5018] kill(-5052, SIGKILL) = 0 [pid 5018] kill(5052, SIGKILL) = 0 [pid 5018] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5018] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5018] getdents64(3, 0x5555557dc6f0 /* 2 entries */, 32768) = 48 [pid 5018] getdents64(3, 0x5555557dc6f0 /* 0 entries */, 32768) = 0 [pid 5018] close(3) = 0 [ 286.413728][ T28] INFO: task syz-executor320:5025 blocked for more than 143 seconds. [ 286.422121][ T28] Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 286.432423][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.442111][ T28] task:syz-executor320 state:D stack:26984 pid:5025 ppid:5021 flags:0x00004006 [ 286.452389][ T28] Call Trace: [ 286.456648][ T28] [ 286.460475][ T28] __schedule+0x1873/0x48f0 [ 286.466055][ T28] ? release_firmware_map_entry+0x190/0x190 [ 286.472948][ T28] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 286.479864][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.487677][ T28] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.492857][ T28] schedule+0xc3/0x180 [ 286.498083][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.503657][ T28] rwsem_down_write_slowpath+0xedd/0x13a0 [ 286.509443][ T28] ? rwsem_down_read_slowpath+0x950/0x950 [ 286.516200][ T28] ? __rwlock_init+0x150/0x150 [ 286.521935][ T28] ? read_lock_is_recursive+0x20/0x20 [ 286.527430][ T28] __down_write_common+0x1aa/0x200 [ 286.532586][ T28] ? clear_nonspinnable+0x60/0x60 [ 286.538636][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.544861][ T28] blkdev_fallocate+0x21b/0x440 [ 286.550629][ T28] vfs_fallocate+0x551/0x6b0 [ 286.557670][ T28] __x64_sys_fallocate+0xbd/0x100 [ 286.563106][ T28] do_syscall_64+0x41/0xc0 [ 286.568693][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.574683][ T28] RIP: 0033:0x7fe63a595b29 [ 286.579127][ T28] RSP: 002b:00007fff5f235e78 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.587634][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe63a595b29 [ 286.604069][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.612316][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.620485][ T28] R10: 0001000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.629117][ T28] R13: 00007fff5f236098 R14: 00007fff5f235ea0 R15: 00007fff5f235e90 [ 286.637784][ T28] [ 286.641383][ T28] INFO: task syz-executor320:5027 blocked for more than 143 seconds. [ 286.650087][ T28] Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 286.658121][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.667289][ T28] task:syz-executor320 state:D stack:25704 pid:5027 ppid:5026 flags:0x00004006 [ 286.676997][ T28] Call Trace: [ 286.680683][ T28] [ 286.683718][ T28] __schedule+0x1873/0x48f0 [ 286.688294][ T28] ? release_firmware_map_entry+0x190/0x190 [ 286.694622][ T28] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 286.701049][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.707322][ T28] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.712892][ T28] schedule+0xc3/0x180 [ 286.717429][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.723286][ T28] rwsem_down_write_slowpath+0xedd/0x13a0 [ 286.729491][ T28] ? rwsem_down_read_slowpath+0x950/0x950 [ 286.735666][ T28] ? __rwlock_init+0x150/0x150 [ 286.740500][ T28] ? read_lock_is_recursive+0x20/0x20 [ 286.745997][ T28] __down_write_common+0x1aa/0x200 [ 286.751532][ T28] ? clear_nonspinnable+0x60/0x60 [ 286.757024][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.762640][ T28] blkdev_fallocate+0x21b/0x440 [ 286.768011][ T28] vfs_fallocate+0x551/0x6b0 [ 286.773058][ T28] __x64_sys_fallocate+0xbd/0x100 [ 286.778542][ T28] do_syscall_64+0x41/0xc0 [ 286.783367][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.789739][ T28] RIP: 0033:0x7fe63a595b29 [ 286.794238][ T28] RSP: 002b:00007fff5f235e78 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.802692][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe63a595b29 [ 286.811150][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.819856][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.828389][ T28] R10: 0001000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.836832][ T28] R13: 00007fff5f236098 R14: 00007fff5f235ea0 R15: 00007fff5f235e90 [ 286.845282][ T28] [ 286.848740][ T28] INFO: task syz-executor320:5028 blocked for more than 143 seconds. [ 286.857314][ T28] Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 286.865250][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.874006][ T28] task:syz-executor320 state:D stack:26800 pid:5028 ppid:5023 flags:0x00004006 [ 286.883945][ T28] Call Trace: [ 286.887622][ T28] [ 286.890917][ T28] __schedule+0x1873/0x48f0 [ 286.896561][ T28] ? release_firmware_map_entry+0x190/0x190 [ 286.904444][ T28] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 286.911495][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.919913][ T28] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.927935][ T28] schedule+0xc3/0x180 [ 286.932053][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.938662][ T28] rwsem_down_write_slowpath+0xedd/0x13a0 [ 286.944562][ T28] ? rwsem_down_read_slowpath+0x950/0x950 [ 286.950704][ T28] ? __rwlock_init+0x150/0x150 [ 286.955961][ T28] ? read_lock_is_recursive+0x20/0x20 [ 286.961753][ T28] __down_write_common+0x1aa/0x200 [ 286.967401][ T28] ? clear_nonspinnable+0x60/0x60 [ 286.972849][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.978550][ T28] blkdev_fallocate+0x21b/0x440 [ 286.983560][ T28] vfs_fallocate+0x551/0x6b0 [ 286.988193][ T28] __x64_sys_fallocate+0xbd/0x100 [ 286.993256][ T28] do_syscall_64+0x41/0xc0 [ 286.998147][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.004536][ T28] RIP: 0033:0x7fe63a595b29 [ 287.009363][ T28] RSP: 002b:00007fff5f235e78 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.018222][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe63a595b29 [ 287.026714][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.035108][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.043577][ T28] R10: 0001000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.051971][ T28] R13: 00007fff5f236098 R14: 00007fff5f235ea0 R15: 00007fff5f235e90 [ 287.060220][ T28] [ 287.063360][ T28] [ 287.063360][ T28] Showing all locks held in the system: [ 287.071310][ T28] 1 lock held by rcu_tasks_kthre/13: [ 287.076728][ T28] #0: ffffffff8d328db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 287.087831][ T28] 1 lock held by rcu_tasks_trace/14: [ 287.093599][ T28] #0: ffffffff8d329170 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xd20 [ 287.105109][ T28] 1 lock held by khungtaskd/28: [ 287.110364][ T28] #0: ffffffff8d328be0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 287.120255][ T28] 2 locks held by klogd/4460: [ 287.125401][ T28] 2 locks held by getty/4768: [ 287.130473][ T28] #0: ffff888028e25098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.140699][ T28] #1: ffffc900015c02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b1/0x1dc0 [ 287.150950][ T28] 2 locks held by syz-executor320/5024: [ 287.156957][ T28] 1 lock held by syz-executor320/5025: [ 287.162849][ T28] #0: ffff88801aca3748 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x21b/0x440 [ 287.173639][ T28] 1 lock held by syz-executor320/5027: [ 287.179150][ T28] #0: ffff88801aca3748 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x21b/0x440 [ 287.190971][ T28] 1 lock held by syz-executor320/5028: [ 287.197483][ T28] #0: ffff88801aca3748 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x21b/0x440 [ 287.209947][ T28] 1 lock held by syz-executor320/5046: [ 287.216477][ T28] #0: ffff88801aca3748 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x21b/0x440 [ 287.228260][ T28] 1 lock held by syz-executor320/5052: [ 287.239333][ T28] #0: ffff88801aca3748 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x21b/0x440 [ 287.251201][ T28] [ 287.254501][ T28] ============================================= [ 287.254501][ T28] [ 287.263516][ T28] NMI backtrace for cpu 0 [ 287.267872][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 287.277702][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.287802][ T28] Call Trace: [ 287.291078][ T28] [ 287.294006][ T28] dump_stack_lvl+0x1e7/0x2d0 [ 287.298685][ T28] ? nf_tcp_handle_invalid+0x650/0x650 [ 287.304143][ T28] ? panic+0x770/0x770 [ 287.308222][ T28] nmi_cpu_backtrace+0x498/0x4d0 [ 287.313158][ T28] ? vprintk_emit+0x10d/0x1f0 [ 287.317843][ T28] ? nmi_trigger_cpumask_backtrace+0x300/0x300 [ 287.323999][ T28] ? _printk+0xd5/0x120 [ 287.328163][ T28] ? panic+0x770/0x770 [ 287.332243][ T28] ? __wake_up_klogd+0xcc/0x100 [ 287.337109][ T28] ? panic+0x770/0x770 [ 287.341195][ T28] ? __rcu_read_unlock+0x96/0x100 [ 287.346229][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.352310][ T28] nmi_trigger_cpumask_backtrace+0x187/0x300 [ 287.358302][ T28] watchdog+0xec2/0xf00 [ 287.362472][ T28] kthread+0x2b8/0x350 [ 287.366548][ T28] ? hungtask_pm_notify+0x90/0x90 [ 287.371576][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.376176][ T28] ret_from_fork+0x2e/0x60 [ 287.380616][ T28] ? kthread_blkcg+0xd0/0xd0 [ 287.385234][ T28] ret_from_fork_asm+0x11/0x20 [ 287.390011][ T28] RIP: 0000:0x0 [ 287.393480][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 287.400841][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 287.409255][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 287.417227][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.425210][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.433184][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 287.441156][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.449155][ T28] [ 287.452385][ T28] Sending NMI from CPU 0 to CPUs 1: [ 287.457667][ C1] NMI backtrace for cpu 1 [ 287.457678][ C1] CPU: 1 PID: 4460 Comm: klogd Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 287.457696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.457705][ C1] RIP: 0010:__lock_acquire+0x13d/0x7f70 [ 287.457734][ C1] Code: 1a 48 89 d7 e8 64 5e 79 00 48 8b 94 24 80 00 00 00 49 b8 00 00 00 00 00 fc ff df 48 c7 c0 00 12 67 90 48 39 02 75 03 45 31 ed <44> 89 74 24 30 41 83 fc 01 77 38 44 89 e0 48 8d 5c c2 08 48 89 d8 [ 287.457747][ C1] RSP: 0018:ffffc9000315ef60 EFLAGS: 00000002 [ 287.457763][ C1] RAX: ffffffff90671200 RBX: 1ffff9200062be10 RCX: 0000000000000000 [ 287.457775][ C1] RDX: ffffffff9221efc0 RSI: 0000000000000000 RDI: ffffffff9221efc0 [ 287.457786][ C1] RBP: ffffc9000315f228 R08: dffffc0000000000 R09: 0000000000000001 [ 287.457798][ C1] R10: dffffc0000000000 R11: fffffbfff1d30bae R12: 0000000000000000 [ 287.457809][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88807d690000 [ 287.457820][ C1] FS: 00007fdd5fc37380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 287.457835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.457846][ C1] CR2: 00005570dd105600 CR3: 000000001fd80000 CR4: 00000000003506e0 [ 287.457861][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.457871][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.457881][ C1] Call Trace: [ 287.457886][ C1] [ 287.457891][ C1] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 287.457911][ C1] ? read_lock_is_recursive+0x20/0x20 [ 287.457935][ C1] ? nmi_trigger_cpumask_backtrace+0x300/0x300 [ 287.457962][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.457987][ C1] ? nmi_handle+0xf7/0x370 [ 287.458011][ C1] ? __lock_acquire+0x13d/0x7f70 [ 287.458032][ C1] ? default_do_nmi+0x62/0x150 [ 287.458051][ C1] ? exc_nmi+0x11e/0x1f0 [ 287.458076][ C1] ? end_repeat_nmi+0x16/0x31 [ 287.458096][ C1] ? __lock_acquire+0x13d/0x7f70 [ 287.458117][ C1] ? __lock_acquire+0x13d/0x7f70 [ 287.458139][ C1] ? __lock_acquire+0x13d/0x7f70 [ 287.458160][ C1] [ 287.458164][ C1] [ 287.458174][ C1] ? mark_lock+0x9a/0x340 [ 287.458197][ C1] ? __lock_acquire+0x1267/0x7f70 [ 287.458222][ C1] ? verify_lock_unused+0x140/0x140 [ 287.458243][ C1] ? unwind_next_frame+0x1a0d/0x2390 [ 287.458263][ C1] ? unwind_next_frame+0x1a0d/0x2390 [ 287.458282][ C1] ? verify_lock_unused+0x140/0x140 [ 287.458304][ C1] ? __sys_sendto+0x484/0x640 [ 287.458328][ C1] ? __x64_sys_sendto+0xde/0xf0 [ 287.458353][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 287.458378][ C1] ? arch_stack_walk+0x105/0x140 [ 287.458398][ C1] lock_acquire+0x1e3/0x520 [ 287.458418][ C1] ? debug_check_no_obj_freed+0xcc/0x420 [ 287.458441][ C1] ? read_lock_is_recursive+0x20/0x20 [ 287.458464][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 287.458488][ C1] ? print_irqtrace_events+0x220/0x220 [ 287.458514][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 287.458536][ C1] ? debug_check_no_obj_freed+0xcc/0x420 [ 287.458554][ C1] ? _raw_spin_lock+0x40/0x40 [ 287.458576][ C1] ? __alloc_skb+0x1b1/0x420 [ 287.458604][ C1] debug_check_no_obj_freed+0xcc/0x420 [ 287.458628][ C1] free_unref_page_prepare+0x241/0xa30 [ 287.458649][ C1] free_unref_page+0x37/0x3f0 [ 287.458670][ C1] __unfreeze_partials+0x1dc/0x220 [ 287.458689][ C1] put_cpu_partial+0x116/0x180 [ 287.458707][ C1] __slab_free+0x2b6/0x390 [ 287.458727][ C1] qlist_free_all+0x22/0x60 [ 287.458752][ C1] kasan_quarantine_reduce+0x14b/0x160 [ 287.458778][ C1] __kasan_kmalloc+0x23/0xb0 [ 287.458797][ C1] ? __alloc_skb+0x1b1/0x420 [ 287.458820][ C1] __kmalloc_node_track_caller+0xb6/0x230 [ 287.458837][ C1] ? __alloc_skb+0x1b1/0x420 [ 287.458862][ C1] kmalloc_reserve+0xfe/0x240 [ 287.458887][ C1] __alloc_skb+0x1b1/0x420 [ 287.458913][ C1] ? napi_build_skb+0x270/0x270 [ 287.458937][ C1] ? __lock_acquire+0x1267/0x7f70 [ 287.458961][ C1] alloc_skb_with_frags+0xa8/0x750 [ 287.458987][ C1] sock_alloc_send_pskb+0x919/0xa50 [ 287.459017][ C1] ? sock_kzfree_s+0x50/0x50 [ 287.459039][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 287.459074][ C1] unix_dgram_sendmsg+0x659/0x2070 [ 287.459099][ C1] ? tomoyo_socket_bind_permission+0x340/0x340 [ 287.459123][ C1] ? unix_dgram_poll+0x6c0/0x6c0 [ 287.459144][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.459161][ C1] ? security_socket_sendmsg+0x81/0xa0 [ 287.459184][ C1] ? unix_dgram_poll+0x6c0/0x6c0 [ 287.459201][ C1] __sys_sendto+0x484/0x640 [ 287.459227][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 287.459266][ C1] ? print_irqtrace_events+0x220/0x220 [ 287.459292][ C1] __x64_sys_sendto+0xde/0xf0 [ 287.459318][ C1] do_syscall_64+0x41/0xc0 [ 287.459335][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.459360][ C1] RIP: 0033:0x7fdd5fd999b5 [ 287.459373][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 287.459386][ C1] RSP: 002b:00007fff8cfdb548 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.459402][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdd5fd999b5 [ 287.459414][ C1] RDX: 000000000000003d RSI: 0000564580deed80 RDI: 0000000000000003 [ 287.459424][ C1] RBP: 0000564580dea910 R08: 0000000000000000 R09: 0000000000000000 [ 287.459434][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 287.459445][ C1] R13: 00007fdd5ff27212 R14: 00007fff8cfdb648 R15: 0000000000000000 [ 287.459463][ C1] [ 287.459470][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.803 msecs [ 287.460106][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 288.014639][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-syzkaller-00123-g57012c57536f #0 [ 288.024450][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 288.034505][ T28] Call Trace: [ 288.037792][ T28] [ 288.040731][ T28] dump_stack_lvl+0x1e7/0x2d0 [ 288.045419][ T28] ? nf_tcp_handle_invalid+0x650/0x650 [ 288.050880][ T28] ? panic+0x770/0x770 [ 288.054971][ T28] ? vscnprintf+0x5d/0x80 [ 288.059324][ T28] panic+0x30f/0x770 [ 288.063239][ T28] ? nmi_trigger_cpumask_backtrace+0x233/0x300 [ 288.069403][ T28] ? __memcpy_flushcache+0x2b0/0x2b0 [ 288.074701][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 288.080786][ T28] ? nmi_trigger_cpumask_backtrace+0x233/0x300 [ 288.086944][ T28] ? nmi_trigger_cpumask_backtrace+0x2b4/0x300 [ 288.093104][ T28] ? nmi_trigger_cpumask_backtrace+0x2b9/0x300 [ 288.099264][ T28] watchdog+0xf00/0xf00 [ 288.103437][ T28] kthread+0x2b8/0x350 [ 288.107689][ T28] ? hungtask_pm_notify+0x90/0x90 [ 288.112718][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.117317][ T28] ret_from_fork+0x2e/0x60 [ 288.121742][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.126341][ T28] ret_from_fork_asm+0x11/0x20 [ 288.131119][ T28] RIP: 0000:0x0 [ 288.134592][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 288.141959][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 288.150382][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 288.158360][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.166336][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.174314][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.182289][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.190277][ T28] [ 288.193601][ T28] Kernel Offset: disabled [ 288.197934][ T28] Rebooting in 86400 seconds..