./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1820871397 <...> Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. execve("./syz-executor1820871397", ["./syz-executor1820871397"], 0x7ffe76f5b630 /* 10 vars */) = 0 brk(NULL) = 0x5555555a4000 brk(0x5555555a4d00) = 0x5555555a4d00 arch_prctl(ARCH_SET_FS, 0x5555555a4380) = 0 set_tid_address(0x5555555a4650) = 5056 set_robust_list(0x5555555a4660, 24) = 0 rseq(0x5555555a4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1820871397", 4096) = 28 getrandom("\x45\x05\x27\xf1\xec\xcf\x1a\x83", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555555a4d00 brk(0x5555555c5d00) = 0x5555555c5d00 brk(0x5555555c6000) = 0x5555555c6000 mprotect(0x7f6d7fcee000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5057 attached , child_tidptr=0x5555555a4650) = 5057 [pid 5057] set_robust_list(0x5555555a4660, 24) = 0 [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5058 attached [pid 5057] <... clone resumed>, child_tidptr=0x5555555a4650) = 5058 ./strace-static-x86_64: Process 5059 attached [pid 5058] set_robust_list(0x5555555a4660, 24 [pid 5056] <... clone resumed>, child_tidptr=0x5555555a4650) = 5059 [pid 5059] set_robust_list(0x5555555a4660, 24 [pid 5058] <... set_robust_list resumed>) = 0 [pid 5059] <... set_robust_list resumed>) = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5058] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5061 attached ./strace-static-x86_64: Process 5060 attached [pid 5058] setpgid(0, 0 [pid 5056] <... clone resumed>, child_tidptr=0x5555555a4650) = 5061 [pid 5061] set_robust_list(0x5555555a4660, 24 [pid 5060] set_robust_list(0x5555555a4660, 24 [pid 5059] <... clone resumed>, child_tidptr=0x5555555a4650) = 5060 [pid 5058] <... setpgid resumed>) = 0 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... set_robust_list resumed>) = 0 [pid 5060] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5063 attached ./strace-static-x86_64: Process 5062 attached [pid 5060] <... prctl resumed>) = 0 [pid 5058] <... openat resumed>) = 3 [pid 5056] <... clone resumed>, child_tidptr=0x5555555a4650) = 5063 [pid 5061] <... clone resumed>, child_tidptr=0x5555555a4650) = 5062 [pid 5060] setpgid(0, 0 [pid 5063] set_robust_list(0x5555555a4660, 24 [pid 5062] set_robust_list(0x5555555a4660, 24 [pid 5058] write(3, "1000", 4 [pid 5062] <... set_robust_list resumed>) = 0 [pid 5063] <... set_robust_list resumed>) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5060] <... setpgid resumed>) = 0 [pid 5058] <... write resumed>) = 4 [pid 5056] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... prctl resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5058] close(3 [pid 5062] setpgid(0, 0 [pid 5058] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 3 [pid 5058] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT./strace-static-x86_64: Process 5065 attached ./strace-static-x86_64: Process 5064 attached [pid 5062] <... setpgid resumed>) = 0 [pid 5060] write(3, "1000", 4 [pid 5058] <... openat resumed>) = 3 [pid 5056] <... clone resumed>, child_tidptr=0x5555555a4650) = 5065 [pid 5065] set_robust_list(0x5555555a4660, 24 [pid 5064] set_robust_list(0x5555555a4660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x5555555a4650) = 5064 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... write resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5060] close(3) = 0 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] <... set_robust_list resumed>) = 0 [pid 5062] write(3, "1000", 4 [pid 5058] dup(3 [pid 5060] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5058] <... dup resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... write resumed>) = 4 [pid 5060] <... openat resumed>) = 3 [pid 5058] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5060] dup(3) = 4 [pid 5060] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5062] close(3 [pid 5064] <... prctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5064] write(3, "1000", 4 [pid 5062] dup(3./strace-static-x86_64: Process 5066 attached [pid 5064] <... write resumed>) = 4 [pid 5062] <... dup resumed>) = 4 [pid 5066] set_robust_list(0x5555555a4660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x5555555a4650) = 5066 [pid 5064] close(3 [pid 5062] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5066] <... set_robust_list resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5066] <... prctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5066] setpgid(0, 0 [pid 5064] dup(3 [pid 5066] <... setpgid resumed>) = 0 [pid 5064] <... dup resumed>) = 4 [pid 5064] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5066] dup(3) = 4 [pid 5066] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5057] kill(-5058, SIGKILL) = 0 [pid 5057] kill(5058, SIGKILL [pid 5059] kill(-5060, SIGKILL [pid 5057] <... kill resumed>) = 0 [pid 5059] <... kill resumed>) = 0 [pid 5059] kill(5060, SIGKILL) = 0 [pid 5061] kill(-5062, SIGKILL) = 0 [pid 5061] kill(5062, SIGKILL) = 0 [pid 5063] kill(-5064, SIGKILL) = 0 [pid 5063] kill(5064, SIGKILL) = 0 [pid 5065] kill(-5066, SIGKILL) = 0 [pid 5065] kill(5066, SIGKILL) = 0 [pid 5059] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(3, 0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [pid 5057] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(3, 0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5065] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5063] newfstatat(3, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5063] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(3, [pid 5063] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5063] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(3, 0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [ 87.313052][ T9] cfg80211: failed to load regulatory.db [pid 5058] <... fallocate resumed>) = ? [pid 5058] +++ killed by SIGKILL +++ [pid 5057] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5058, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=7853 /* 78.53 s */} --- [pid 5057] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached , child_tidptr=0x5555555a4650) = 5079 [pid 5079] set_robust_list(0x5555555a4660, 24) = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5079] dup(3) = 4 [pid 5079] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5057] kill(-5079, SIGKILL) = 0 [pid 5057] kill(5079, SIGKILL) = 0 [pid 5057] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5057] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5057] getdents64(3, 0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5057] getdents64(3, 0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5057] close(3) = 0 [pid 5060] <... fallocate resumed>) = ? [pid 5060] +++ killed by SIGKILL +++ [pid 5059] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5060, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=7881 /* 78.81 s */} --- [pid 5059] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5086 attached , child_tidptr=0x5555555a4650) = 5086 [pid 5086] set_robust_list(0x5555555a4660, 24) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5086] write(3, "1000", 4) = 4 [pid 5086] close(3) = 0 [pid 5086] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5086] dup(3) = 4 [pid 5086] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5059] kill(-5086, SIGKILL) = 0 [pid 5059] kill(5086, SIGKILL) = 0 [pid 5059] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5059] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5059] getdents64(3, 0x5555555a56f0 /* 2 entries */, 32768) = 48 [pid 5059] getdents64(3, 0x5555555a56f0 /* 0 entries */, 32768) = 0 [pid 5059] close(3) = 0 [ 286.934053][ T29] INFO: task syz-executor182:5064 blocked for more than 143 seconds. [ 286.942395][ T29] Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 286.950447][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.959647][ T29] task:syz-executor182 state:D stack:28208 pid:5064 tgid:5064 ppid:5063 flags:0x00004006 [ 286.970363][ T29] Call Trace: [ 286.973674][ T29] [ 286.977137][ T29] __schedule+0xf12/0x5c00 [ 286.982164][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 286.988284][ T29] ? hlock_class+0x4e/0x130 [ 286.992864][ T29] ? mark_lock+0xb5/0xc50 [ 286.997723][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 287.003763][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.009126][ T29] ? schedule+0x1fc/0x270 [ 287.013479][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.018915][ T29] ? __down_write_common+0x899/0x1400 [ 287.024399][ T29] schedule+0xe9/0x270 [ 287.028513][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.034051][ T29] __down_write_common+0x948/0x1400 [ 287.039293][ T29] ? aa_file_perm+0x4f2/0x1000 [ 287.044253][ T29] ? up_write+0x510/0x510 [ 287.060135][ T29] ? lock_sync+0x190/0x190 [ 287.064665][ T29] ? preempt_count_sub+0x160/0x160 [ 287.069853][ T29] blkdev_fallocate+0x1e9/0x450 [ 287.074875][ T29] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.080036][ T29] vfs_fallocate+0x4b4/0xf70 [ 287.084739][ T29] __x64_sys_fallocate+0xd5/0x140 [ 287.101293][ T29] do_syscall_64+0xd3/0x250 [ 287.107450][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.113467][ T29] RIP: 0033:0x7f6d7fc7bb29 [ 287.117959][ T29] RSP: 002b:00007fffc8dd7d08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.126456][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d7fc7bb29 [ 287.135075][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.143573][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.152058][ T29] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.160613][ T29] R13: 00007fffc8dd7f28 R14: 00007fffc8dd7d30 R15: 00007fffc8dd7d20 [ 287.169127][ T29] [ 287.172203][ T29] INFO: task syz-executor182:5066 blocked for more than 143 seconds. [ 287.180774][ T29] Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 287.188842][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.198050][ T29] task:syz-executor182 state:D stack:26872 pid:5066 tgid:5066 ppid:5065 flags:0x00004006 [ 287.208300][ T29] Call Trace: [ 287.211605][ T29] [ 287.214608][ T29] __schedule+0xf12/0x5c00 [ 287.219141][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 287.225649][ T29] ? hlock_class+0x4e/0x130 [ 287.230789][ T29] ? mark_lock+0xb5/0xc50 [ 287.235695][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 287.242207][ T29] ? io_schedule_timeout+0x150/0x150 [ 287.247591][ T29] ? schedule+0x1fc/0x270 [ 287.252707][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.259048][ T29] ? __down_write_common+0x899/0x1400 [ 287.264988][ T29] schedule+0xe9/0x270 [ 287.269102][ T29] schedule_preempt_disabled+0x13/0x20 [ 287.275068][ T29] __down_write_common+0x948/0x1400 [ 287.280399][ T29] ? aa_file_perm+0x4f2/0x1000 [ 287.285418][ T29] ? up_write+0x510/0x510 [ 287.289890][ T29] ? lock_sync+0x190/0x190 [ 287.294380][ T29] ? preempt_count_sub+0x160/0x160 [ 287.300127][ T29] blkdev_fallocate+0x1e9/0x450 [ 287.305656][ T29] ? file_to_blk_mode+0x1a0/0x1a0 [ 287.311261][ T29] vfs_fallocate+0x4b4/0xf70 [ 287.316405][ T29] __x64_sys_fallocate+0xd5/0x140 [ 287.321934][ T29] do_syscall_64+0xd3/0x250 [ 287.326978][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.332923][ T29] RIP: 0033:0x7f6d7fc7bb29 [ 287.337925][ T29] RSP: 002b:00007fffc8dd7d08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.346902][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d7fc7bb29 [ 287.354953][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.363218][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.371345][ T29] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.379860][ T29] R13: 00007fffc8dd7f28 R14: 00007fffc8dd7d30 R15: 00007fffc8dd7d20 [ 287.388361][ T29] [ 287.391862][ T29] [ 287.391862][ T29] Showing all locks held in the system: [ 287.400127][ T29] 5 locks held by kworker/u4:0/11: [ 287.405412][ T29] 1 lock held by khungtaskd/29: [ 287.410280][ T29] #0: ffffffff8d1acba0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.420354][ T29] 1 lock held by klogd/4501: [ 287.425536][ T29] 2 locks held by getty/4807: [ 287.430238][ T29] #0: ffff88802959c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.440583][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 287.451235][ T29] 1 lock held by syz-executor182/5062: [ 287.457228][ T29] 1 lock held by syz-executor182/5064: [ 287.462714][ T29] #0: ffff88801b4a42c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.473465][ T29] 1 lock held by syz-executor182/5066: [ 287.478993][ T29] #0: ffff88801b4a42c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.489763][ T29] 1 lock held by syz-executor182/5079: [ 287.495726][ T29] #0: ffff88801b4a42c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.506951][ T29] 1 lock held by syz-executor182/5086: [ 287.512539][ T29] #0: ffff88801b4a42c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 287.545887][ T29] [ 287.555581][ T29] ============================================= [ 287.555581][ T29] [ 287.624178][ T29] NMI backtrace for cpu 1 [ 287.628568][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 287.638400][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.648478][ T29] Call Trace: [ 287.651783][ T29] [ 287.654733][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.659404][ T29] nmi_cpu_backtrace+0x277/0x390 [ 287.664399][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.669656][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 287.675674][ T29] watchdog+0xf87/0x1210 [ 287.681385][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.687407][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.692629][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.697664][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.703662][ T29] kthread+0x2c6/0x3a0 [ 287.707743][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.712957][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.718610][ T29] ret_from_fork+0x45/0x80 [ 287.723071][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.728725][ T29] ret_from_fork_asm+0x11/0x20 [ 287.733535][ T29] [ 287.736898][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.742222][ C0] NMI backtrace for cpu 0 [ 287.742234][ C0] CPU: 0 PID: 4501 Comm: klogd Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 287.742257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.742268][ C0] RIP: 0010:kasan_check_range+0xff/0x190 [ 287.742331][ C0] Code: 83 e2 07 49 39 d1 75 0a 45 3a 11 b8 01 00 00 00 7c 0b 44 89 c2 e8 21 ed ff ff 83 f0 01 5b 5d 41 5c c3 48 85 d2 74 4f 48 01 ea 09 48 83 c0 01 48 39 d0 74 41 80 38 00 74 f2 eb b6 41 bc 08 00 [ 287.742351][ C0] RSP: 0018:ffffc9000316f628 EFLAGS: 00000086 [ 287.742368][ C0] RAX: fffffbfff1e75ef2 RBX: fffffbfff1e75ef3 RCX: ffffffff818f042f [ 287.742382][ C0] RDX: fffffbfff1e75ef3 RSI: 0000000000000008 RDI: ffffffff8f3af790 [ 287.742395][ C0] RBP: fffffbfff1e75ef2 R08: 0000000000000000 R09: fffffbfff1e75ef2 [ 287.742408][ C0] R10: ffffffff8f3af797 R11: 0000000000000001 R12: 0000000000000009 [ 287.742421][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200062ded4 [ 287.742434][ C0] FS: 00007f70b57cf380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.742455][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.742470][ C0] CR2: 00005555555ad6f8 CR3: 0000000027cdd000 CR4: 00000000003506f0 [ 287.742482][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.742494][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.742506][ C0] Call Trace: [ 287.742512][ C0] [ 287.742519][ C0] ? show_regs+0x8f/0xa0 [ 287.742545][ C0] ? nmi_cpu_backtrace+0x1d4/0x390 [ 287.742572][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.742603][ C0] ? nmi_handle+0x1a6/0x570 [ 287.742629][ C0] ? kasan_check_range+0xff/0x190 [ 287.742653][ C0] ? default_do_nmi+0x6a/0x160 [ 287.742686][ C0] ? exc_nmi+0x186/0x200 [ 287.742716][ C0] ? end_repeat_nmi+0xf/0x2a [ 287.742745][ C0] ? trace_irq_enable.constprop.0+0x2f/0x100 [ 287.742779][ C0] ? kasan_check_range+0xff/0x190 [ 287.742804][ C0] ? kasan_check_range+0xff/0x190 [ 287.742835][ C0] ? kasan_check_range+0xff/0x190 [ 287.742859][ C0] [ 287.742865][ C0] [ 287.742871][ C0] trace_irq_enable.constprop.0+0x2f/0x100 [ 287.742904][ C0] trace_hardirqs_on+0x26/0x40 [ 287.742934][ C0] _raw_spin_unlock_irqrestore+0x4e/0x70 [ 287.742963][ C0] debug_object_active_state+0x2e9/0x3a0 [ 287.743041][ C0] ? debug_stats_show+0x270/0x270 [ 287.743065][ C0] ? mark_held_locks+0x9f/0xe0 [ 287.743098][ C0] ? __free_slab+0x150/0x150 [ 287.743124][ C0] ? __free_slab+0x150/0x150 [ 287.743151][ C0] __call_rcu_common.constprop.0+0x44/0x7b0 [ 287.743188][ C0] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 287.743217][ C0] __put_partials+0x14c/0x160 [ 287.743284][ C0] qlist_free_all+0x58/0x150 [ 287.743312][ C0] kasan_quarantine_reduce+0x18e/0x1d0 [ 287.743341][ C0] __kasan_slab_alloc+0x65/0x90 [ 287.743364][ C0] kmem_cache_alloc_node+0x177/0x340 [ 287.743397][ C0] __alloc_skb+0x287/0x330 [ 287.743470][ C0] ? __napi_build_skb+0x50/0x50 [ 287.743489][ C0] ? __lock_acquire+0x1502/0x3b30 [ 287.743514][ C0] alloc_skb_with_frags+0xe4/0x710 [ 287.743542][ C0] sock_alloc_send_pskb+0x7e4/0x970 [ 287.743572][ C0] ? lock_acquire+0x1ae/0x520 [ 287.743594][ C0] ? sock_wmalloc+0x120/0x120 [ 287.743619][ C0] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.743638][ C0] ? do_raw_spin_lock+0x12e/0x2b0 [ 287.743659][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.743683][ C0] unix_dgram_sendmsg+0x464/0x1ca0 [ 287.743763][ C0] ? aa_sk_perm+0x2f8/0xb40 [ 287.743793][ C0] ? unix_stream_recvmsg+0x1b0/0x1b0 [ 287.743823][ C0] ? aa_af_perm+0x250/0x250 [ 287.743852][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.743884][ C0] ? unix_stream_recvmsg+0x1b0/0x1b0 [ 287.743914][ C0] __sock_sendmsg+0xd5/0x180 [ 287.743969][ C0] __sys_sendto+0x225/0x310 [ 287.743988][ C0] ? __ia32_sys_getpeername+0xb0/0xb0 [ 287.744005][ C0] ? reacquire_held_locks+0x4c0/0x4c0 [ 287.744035][ C0] ? rcu_is_watching+0x12/0xb0 [ 287.744070][ C0] ? folio_memcg_unlock+0x240/0x240 [ 287.744098][ C0] ? __text_poke+0xca0/0xca0 [ 287.744120][ C0] ? rcu_is_watching+0x12/0xb0 [ 287.744148][ C0] __x64_sys_sendto+0xe0/0x1b0 [ 287.744170][ C0] ? do_syscall_64+0x93/0x250 [ 287.744198][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.744219][ C0] do_syscall_64+0xd3/0x250 [ 287.744249][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 287.744274][ C0] RIP: 0033:0x7f70b59319b5 [ 287.744290][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 287.744310][ C0] RSP: 002b:00007fffc6307d48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.744329][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f70b59319b5 [ 287.744342][ C0] RDX: 0000000000000073 RSI: 0000562565366cc0 RDI: 0000000000000003 [ 287.744354][ C0] RBP: 0000562565362910 R08: 0000000000000000 R09: 0000000000000000 [ 287.744367][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 287.744379][ C0] R13: 00007f70b5abf212 R14: 00007fffc6307e48 R15: 0000000000000000 [ 287.744400][ C0] [ 287.744407][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.185 msecs [ 287.773892][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.773906][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 287.773931][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.773942][ T29] Call Trace: [ 287.773949][ T29] [ 287.773959][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.773992][ T29] panic+0x6dc/0x790 [ 287.774022][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 287.774050][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.774087][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.774117][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.774150][ T29] ? watchdog+0xd3e/0x1210 [ 287.774176][ T29] ? watchdog+0xd31/0x1210 [ 287.774206][ T29] watchdog+0xd4f/0x1210 [ 287.774238][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.774265][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.774291][ T29] ? __kthread_parkme+0x14b/0x220 [ 288.349562][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 288.355682][ T29] kthread+0x2c6/0x3a0 [ 288.359782][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.364997][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.370643][ T29] ret_from_fork+0x45/0x80 [ 288.375075][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 288.380744][ T29] ret_from_fork_asm+0x11/0x20 [ 288.385558][ T29] [ 288.388795][ T29] Kernel Offset: disabled [ 288.393150][ T29] Rebooting in 86400 seconds..