./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2366996897 <...> Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. execve("./syz-executor2366996897", ["./syz-executor2366996897"], 0x7ffee9366850 /* 10 vars */) = 0 brk(NULL) = 0x5555855a2000 brk(0x5555855a2d00) = 0x5555855a2d00 arch_prctl(ARCH_SET_FS, 0x5555855a2380) = 0 set_tid_address(0x5555855a2650) = 5875 set_robust_list(0x5555855a2660, 24) = 0 rseq(0x5555855a2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2366996897", 4096) = 28 getrandom("\xd9\xd5\x38\x1c\x06\xdf\x17\x32", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555855a2d00 brk(0x5555855c3d00) = 0x5555855c3d00 brk(0x5555855c4000) = 0x5555855c4000 mprotect(0x7febc678b000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555855a2650) = 5876 ./strace-static-x86_64: Process 5876 attached [pid 5875] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5876] set_robust_list(0x5555855a2660, 24) = 0 [pid 5876] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached [pid 5875] <... clone resumed>, child_tidptr=0x5555855a2650) = 5877 [pid 5877] set_robust_list(0x5555855a2660, 24./strace-static-x86_64: Process 5878 attached [pid 5875] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5877] <... set_robust_list resumed>) = 0 [pid 5876] <... clone resumed>, child_tidptr=0x5555855a2650) = 5878 ./strace-static-x86_64: Process 5879 attached [pid 5878] set_robust_list(0x5555855a2660, 24 [pid 5877] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5879] set_robust_list(0x5555855a2660, 24 [pid 5878] <... set_robust_list resumed>) = 0 [pid 5875] <... clone resumed>, child_tidptr=0x5555855a2650) = 5879 [pid 5879] <... set_robust_list resumed>) = 0 [pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5879] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5875] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] <... prctl resumed>) = 0 [pid 5878] setpgid(0, 0./strace-static-x86_64: Process 5882 attached ./strace-static-x86_64: Process 5881 attached ./strace-static-x86_64: Process 5880 attached ) = 0 [pid 5875] <... clone resumed>, child_tidptr=0x5555855a2650) = 5882 [pid 5882] set_robust_list(0x5555855a2660, 24 [pid 5881] set_robust_list(0x5555855a2660, 24 [pid 5880] set_robust_list(0x5555855a2660, 24 [pid 5879] <... clone resumed>, child_tidptr=0x5555855a2650) = 5880 [pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5877] <... clone resumed>, child_tidptr=0x5555855a2650) = 5881 [pid 5882] <... set_robust_list resumed>) = 0 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5880] <... set_robust_list resumed>) = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5882] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5880] <... prctl resumed>) = 0 [pid 5881] <... prctl resumed>) = 0 [pid 5878] <... openat resumed>) = 3 [pid 5881] setpgid(0, 0 [pid 5878] write(3, "1000", 4 [pid 5880] setpgid(0, 0./strace-static-x86_64: Process 5883 attached [pid 5881] <... setpgid resumed>) = 0 [pid 5880] <... setpgid resumed>) = 0 [pid 5878] <... write resumed>) = 4 [pid 5883] set_robust_list(0x5555855a2660, 24 [pid 5882] <... clone resumed>, child_tidptr=0x5555855a2650) = 5883 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5878] close(3 [pid 5883] <... set_robust_list resumed>) = 0 [pid 5880] <... openat resumed>) = 3 [pid 5880] write(3, "1000", 4 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5881] <... openat resumed>) = 3 [pid 5878] <... close resumed>) = 0 [pid 5883] <... prctl resumed>) = 0 [pid 5881] write(3, "1000", 4 [pid 5880] <... write resumed>) = 4 [pid 5878] write(1, "executing program\n", 18executing program [pid 5883] setpgid(0, 0 [pid 5881] <... write resumed>) = 4 [pid 5880] close(3 [pid 5878] <... write resumed>) = 18 [pid 5883] <... setpgid resumed>) = 0 [pid 5881] close(3 [pid 5880] <... close resumed>) = 0 [pid 5878] openat(AT_FDCWD, "/dev/comedi3", O_RDONLY|O_APPEND [pid 5881] <... close resumed>) = 0 [pid 5880] write(1, "executing program\n", 18executing program [pid 5881] write(1, "executing program\n", 18 [pid 5880] <... write resumed>) = 18 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5878] <... openat resumed>) = 3 [pid 5880] openat(AT_FDCWD, "/dev/comedi3", O_RDONLY|O_APPEND [pid 5881] <... write resumed>) = 18 [pid 5878] ioctl(3, COMEDI_DEVCONFIG [pid 5883] <... openat resumed>) = 3 [pid 5881] openat(AT_FDCWD, "/dev/comedi3", O_RDONLY|O_APPEND [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 executing program [pid 5883] write(1, "executing program\n", 18) = 18 [pid 5883] openat(AT_FDCWD, "/dev/comedi3", O_RDONLY|O_APPEND [pid 5879] kill(-5880, SIGKILL [pid 5877] kill(-5881, SIGKILL [pid 5876] kill(-5878, SIGKILL [pid 5879] <... kill resumed>) = 0 [pid 5877] <... kill resumed>) = 0 [pid 5879] kill(5880, SIGKILL [pid 5877] kill(5881, SIGKILL [pid 5876] <... kill resumed>) = 0 [pid 5879] <... kill resumed>) = 0 [pid 5877] <... kill resumed>) = 0 [pid 5876] kill(5878, SIGKILL) = 0 [pid 5882] kill(-5883, SIGKILL) = 0 [pid 5882] kill(5883, SIGKILL) = 0 [pid 5879] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5879] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5882] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5876] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] <... openat resumed>) = 3 [pid 5879] getdents64(3, [pid 5876] <... openat resumed>) = 3 [pid 5882] newfstatat(3, "", [pid 5877] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5879] <... getdents64 resumed>0x5555855a36f0 /* 2 entries */, 32768) = 48 [pid 5876] newfstatat(3, "", [pid 5882] getdents64(3, [pid 5877] <... openat resumed>) = 3 [pid 5876] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5882] <... getdents64 resumed>0x5555855a36f0 /* 2 entries */, 32768) = 48 [pid 5879] getdents64(3, [pid 5876] getdents64(3, [pid 5882] getdents64(3, [pid 5879] <... getdents64 resumed>0x5555855a36f0 /* 0 entries */, 32768) = 0 [pid 5877] newfstatat(3, "", [pid 5882] <... getdents64 resumed>0x5555855a36f0 /* 0 entries */, 32768) = 0 [pid 5879] close(3 [pid 5877] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5876] <... getdents64 resumed>0x5555855a36f0 /* 2 entries */, 32768) = 48 [pid 5879] <... close resumed>) = 0 [pid 5882] close(3 [pid 5877] getdents64(3, [pid 5876] getdents64(3, [pid 5882] <... close resumed>) = 0 [pid 5876] <... getdents64 resumed>0x5555855a36f0 /* 0 entries */, 32768) = 0 [pid 5877] <... getdents64 resumed>0x5555855a36f0 /* 2 entries */, 32768) = 48 [pid 5877] getdents64(3, [pid 5876] close(3 [pid 5877] <... getdents64 resumed>0x5555855a36f0 /* 0 entries */, 32768) = 0 [pid 5876] <... close resumed>) = 0 [pid 5877] close(3) = 0 [ 286.486832][ T31] INFO: task syz-executor236:5880 blocked for more than 143 seconds. [ 286.495027][ T31] Not tainted 6.16.0-next-20250731-syzkaller #0 [ 286.501794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.511380][ T31] task:syz-executor236 state:D stack:26824 pid:5880 tgid:5880 ppid:5879 task_flags:0x400040 flags:0x00004006 [ 286.523820][ T31] Call Trace: [ 286.527111][ T31] [ 286.530048][ T31] __schedule+0x1798/0x4cc0 [ 286.535164][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.540046][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.545337][ T31] ? __pfx___schedule+0x10/0x10 [ 286.550225][ T31] ? schedule+0x91/0x360 [ 286.555304][ T31] schedule+0x165/0x360 [ 286.559481][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.565371][ T31] __mutex_lock+0x7e6/0x1360 [ 286.569983][ T31] ? __mutex_lock+0x5b6/0x1360 [ 286.575112][ T31] ? comedi_open+0xc0/0x590 [ 286.579648][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.585151][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.589949][ T31] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 286.595877][ T31] ? comedi_open+0x8b/0x590 [ 286.600394][ T31] comedi_open+0xc0/0x590 [ 286.605114][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 286.610875][ T31] chrdev_open+0x4c9/0x5e0 [ 286.616279][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 286.621256][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 286.628037][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 286.633001][ T31] do_dentry_open+0x953/0x13f0 [ 286.638141][ T31] vfs_open+0x3b/0x340 [ 286.642222][ T31] ? path_openat+0x2ecd/0x3830 [ 286.647350][ T31] path_openat+0x2ee5/0x3830 [ 286.651943][ T31] ? arch_stack_walk+0xfc/0x150 [ 286.657183][ T31] ? stack_depot_save_flags+0x40/0x860 [ 286.662666][ T31] ? __pfx_path_openat+0x10/0x10 [ 286.668003][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.674331][ T31] do_filp_open+0x1fa/0x410 [ 286.678930][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.684203][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 286.689255][ T31] ? _raw_spin_unlock+0x28/0x50 [ 286.694459][ T31] ? alloc_fd+0x64c/0x6c0 [ 286.698818][ T31] do_sys_openat2+0x121/0x1c0 [ 286.704000][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.709232][ T31] __x64_sys_openat+0x138/0x170 [ 286.714469][ T31] do_syscall_64+0xfa/0x3b0 [ 286.718980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.724788][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.730868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.736223][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.742134][ T31] RIP: 0033:0x7febc6718c29 [ 286.746935][ T31] RSP: 002b:00007ffcc703ff08 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.755616][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febc6718c29 [ 286.763835][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 286.771812][ T31] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 286.780252][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.788585][ T31] R13: 00007ffcc7040128 R14: 00007ffcc703ff30 R15: 00007ffcc703ff20 [ 286.796888][ T31] [ 286.799917][ T31] INFO: task syz-executor236:5881 blocked for more than 143 seconds. [ 286.808351][ T31] Not tainted 6.16.0-next-20250731-syzkaller #0 [ 286.815323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.824252][ T31] task:syz-executor236 state:D stack:26824 pid:5881 tgid:5881 ppid:5877 task_flags:0x400040 flags:0x00004006 [ 286.836447][ T31] Call Trace: [ 286.839729][ T31] [ 286.842662][ T31] __schedule+0x1798/0x4cc0 [ 286.848139][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.853006][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.858080][ T31] ? __pfx___schedule+0x10/0x10 [ 286.862964][ T31] ? schedule+0x91/0x360 [ 286.867681][ T31] schedule+0x165/0x360 [ 286.871858][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.877656][ T31] __mutex_lock+0x7e6/0x1360 [ 286.882268][ T31] ? __mutex_lock+0x5b6/0x1360 [ 286.887418][ T31] ? comedi_open+0xc0/0x590 [ 286.891932][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.897343][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 286.902123][ T31] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 286.908036][ T31] ? comedi_open+0x8b/0x590 [ 286.912549][ T31] comedi_open+0xc0/0x590 [ 286.917338][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 286.922565][ T31] chrdev_open+0x4c9/0x5e0 [ 286.927399][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 286.932368][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 286.939089][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 286.946025][ T31] do_dentry_open+0x953/0x13f0 [ 286.950840][ T31] vfs_open+0x3b/0x340 [ 286.955543][ T31] ? path_openat+0x2ecd/0x3830 [ 286.960317][ T31] path_openat+0x2ee5/0x3830 [ 286.965472][ T31] ? arch_stack_walk+0xfc/0x150 [ 286.970355][ T31] ? stack_depot_save_flags+0x40/0x860 [ 286.976192][ T31] ? __pfx_path_openat+0x10/0x10 [ 286.981131][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.987668][ T31] do_filp_open+0x1fa/0x410 [ 286.992178][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.997577][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 287.002648][ T31] ? _raw_spin_unlock+0x28/0x50 [ 287.007928][ T31] ? alloc_fd+0x64c/0x6c0 [ 287.012281][ T31] do_sys_openat2+0x121/0x1c0 [ 287.017416][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.022645][ T31] __x64_sys_openat+0x138/0x170 [ 287.027867][ T31] do_syscall_64+0xfa/0x3b0 [ 287.032376][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.037841][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.044215][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.048902][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.055183][ T31] RIP: 0033:0x7febc6718c29 [ 287.059608][ T31] RSP: 002b:00007ffcc703ff08 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.068941][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febc6718c29 [ 287.077229][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 287.085446][ T31] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 287.093664][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.101638][ T31] R13: 00007ffcc7040128 R14: 00007ffcc703ff30 R15: 00007ffcc703ff20 [ 287.109983][ T31] [ 287.113169][ T31] INFO: task syz-executor236:5883 blocked for more than 143 seconds. [ 287.121714][ T31] Not tainted 6.16.0-next-20250731-syzkaller #0 [ 287.128842][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.137867][ T31] task:syz-executor236 state:D stack:27704 pid:5883 tgid:5883 ppid:5882 task_flags:0x400040 flags:0x00004006 [ 287.150243][ T31] Call Trace: [ 287.153744][ T31] [ 287.156682][ T31] __schedule+0x1798/0x4cc0 [ 287.161225][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.166581][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.171440][ T31] ? __pfx___schedule+0x10/0x10 [ 287.176999][ T31] ? schedule+0x91/0x360 [ 287.181269][ T31] schedule+0x165/0x360 [ 287.186063][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.191535][ T31] __mutex_lock+0x7e6/0x1360 [ 287.196531][ T31] ? __mutex_lock+0x5b6/0x1360 [ 287.201319][ T31] ? comedi_open+0xc0/0x590 [ 287.206175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.211228][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 287.216425][ T31] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 287.221988][ T31] ? comedi_open+0x8b/0x590 [ 287.226899][ T31] comedi_open+0xc0/0x590 [ 287.231245][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 287.236789][ T31] chrdev_open+0x4c9/0x5e0 [ 287.241224][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 287.246536][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 287.252882][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 287.258183][ T31] do_dentry_open+0x953/0x13f0 [ 287.262976][ T31] vfs_open+0x3b/0x340 [ 287.267447][ T31] ? path_openat+0x2ecd/0x3830 [ 287.272220][ T31] path_openat+0x2ee5/0x3830 [ 287.277146][ T31] ? arch_stack_walk+0xfc/0x150 [ 287.282029][ T31] ? stack_depot_save_flags+0x40/0x860 [ 287.287851][ T31] ? __pfx_path_openat+0x10/0x10 [ 287.292790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.299931][ T31] do_filp_open+0x1fa/0x410 [ 287.304779][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.309649][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 287.315084][ T31] ? _raw_spin_unlock+0x28/0x50 [ 287.319957][ T31] ? alloc_fd+0x64c/0x6c0 [ 287.324699][ T31] do_sys_openat2+0x121/0x1c0 [ 287.329394][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.334824][ T31] __x64_sys_openat+0x138/0x170 [ 287.339692][ T31] do_syscall_64+0xfa/0x3b0 [ 287.344580][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.349793][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.356215][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.360903][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.367150][ T31] RIP: 0033:0x7febc6718c29 [ 287.371565][ T31] RSP: 002b:00007ffcc703ff08 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.380377][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febc6718c29 [ 287.388655][ T31] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 287.396867][ T31] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 287.405326][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.413299][ T31] R13: 00007ffcc7040128 R14: 00007ffcc703ff30 R15: 00007ffcc703ff20 [ 287.421914][ T31] [ 287.425189][ T31] [ 287.425189][ T31] Showing all locks held in the system: [ 287.432912][ T31] 1 lock held by khungtaskd/31: [ 287.438231][ T31] #0: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.448399][ T31] 2 locks held by getty/5610: [ 287.453075][ T31] #0: ffff888033b3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.463218][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 287.473595][ T31] 2 locks held by syz-executor236/5878: [ 287.479138][ T31] 1 lock held by syz-executor236/5880: [ 287.484983][ T31] #0: ffff88802f6fa8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590 [ 287.494474][ T31] 1 lock held by syz-executor236/5881: [ 287.499930][ T31] #0: ffff88802f6fa8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590 [ 287.509404][ T31] 1 lock held by syz-executor236/5883: [ 287.515062][ T31] #0: ffff88802f6fa8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_open+0xc0/0x590 [ 287.524632][ T31] [ 287.526956][ T31] ============================================= [ 287.526956][ T31] [ 287.536092][ T31] NMI backtrace for cpu 1 [ 287.536117][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 287.536137][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.536148][ T31] Call Trace: [ 287.536156][ T31] [ 287.536163][ T31] dump_stack_lvl+0x189/0x250 [ 287.536195][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.536220][ T31] ? __pfx__printk+0x10/0x10 [ 287.536256][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 287.536283][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.536308][ T31] ? __pfx__printk+0x10/0x10 [ 287.536336][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.536359][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 287.536385][ T31] watchdog+0xf93/0xfe0 [ 287.536407][ T31] ? watchdog+0x1de/0xfe0 [ 287.536429][ T31] kthread+0x70e/0x8a0 [ 287.536457][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.536473][ T31] ? __pfx_kthread+0x10/0x10 [ 287.536500][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.536524][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.536548][ T31] ? __pfx_kthread+0x10/0x10 [ 287.536575][ T31] ret_from_fork+0x3fc/0x770 [ 287.536599][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.536626][ T31] ? __switch_to_asm+0x39/0x70 [ 287.536651][ T31] ? __switch_to_asm+0x33/0x70 [ 287.536675][ T31] ? __pfx_kthread+0x10/0x10 [ 287.536701][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.536731][ T31] [ 287.536738][ T31] Sending NMI from CPU 1 to CPUs 0: [ 287.683147][ C0] NMI backtrace for cpu 0 [ 287.683161][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 287.683181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.683197][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.683226][ C0] RIP: 0010:psi_task_switch+0x0/0x880 [ 287.683247][ C0] Code: 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df e9 ec f9 ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 48 41 89 d4 48 [ 287.683260][ C0] RSP: 0018:ffffc90000117738 EFLAGS: 00000097 [ 287.683274][ C0] RAX: 0000000000000001 RBX: ffff88802de65a00 RCX: 0000000000000000 [ 287.683285][ C0] RDX: 0000000000000001 RSI: ffff88802de65a00 RDI: ffff88801d295a00 [ 287.683297][ C0] RBP: ffffc90000117958 R08: ffff88801d295a07 R09: 1ffff11003a52b40 [ 287.683309][ C0] R10: dffffc0000000000 R11: ffffed1003a52b41 R12: dffffc0000000000 [ 287.683326][ C0] R13: 0000000000000402 R14: ffff88801d295a00 R15: ffff88801d295a68 [ 287.683339][ C0] FS: 0000000000000000(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000 [ 287.683352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.683363][ C0] CR2: 000055dbaf437168 CR3: 000000000e336000 CR4: 00000000003526f0 [ 287.683380][ C0] Call Trace: [ 287.683388][ C0] [ 287.683393][ C0] __schedule+0x22e9/0x4cc0 [ 287.683419][ C0] ? do_raw_spin_lock+0x121/0x290 [ 287.683440][ C0] ? __lock_acquire+0xab9/0xd20 [ 287.683453][ C0] ? __pfx___schedule+0x10/0x10 [ 287.683476][ C0] ? schedule+0x91/0x360 [ 287.683494][ C0] schedule+0x165/0x360 [ 287.683511][ C0] toggle_allocation_gate+0x159/0x240 [ 287.683532][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 287.683552][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.683573][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 287.683588][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 287.683603][ C0] process_scheduled_works+0xade/0x17b0 [ 287.683627][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.683648][ C0] worker_thread+0x8a0/0xda0 [ 287.683672][ C0] kthread+0x70e/0x8a0 [ 287.683691][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.683705][ C0] ? __pfx_kthread+0x10/0x10 [ 287.683723][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.683740][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.683758][ C0] ? __pfx_kthread+0x10/0x10 [ 287.683775][ C0] ret_from_fork+0x3fc/0x770 [ 287.683792][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 287.683809][ C0] ? __switch_to_asm+0x39/0x70 [ 287.683828][ C0] ? __switch_to_asm+0x33/0x70 [ 287.683846][ C0] ? __pfx_kthread+0x10/0x10 [ 287.683864][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.683880][ C0] [ 287.684153][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.684168][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 287.684190][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.684202][ T31] Call Trace: [ 287.684210][ T31] [ 287.684218][ T31] dump_stack_lvl+0x99/0x250 [ 287.684245][ T31] ? __asan_memcpy+0x40/0x70 [ 287.684269][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.684295][ T31] ? __pfx__printk+0x10/0x10 [ 287.684331][ T31] vpanic+0x281/0x750 [ 287.684354][ T31] ? __pfx_vpanic+0x10/0x10 [ 287.684375][ T31] ? preempt_schedule+0xae/0xc0 [ 287.684402][ T31] ? preempt_schedule_common+0x83/0xd0 [ 287.684434][ T31] panic+0xb9/0xc0 [ 287.684453][ T31] ? __pfx_panic+0x10/0x10 [ 287.684476][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 287.684502][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 287.684528][ T31] watchdog+0xfd2/0xfe0 [ 287.684551][ T31] ? watchdog+0x1de/0xfe0 [ 287.684574][ T31] kthread+0x70e/0x8a0 [ 287.684603][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.684619][ T31] ? __pfx_kthread+0x10/0x10 [ 287.684648][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.684672][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.684697][ T31] ? __pfx_kthread+0x10/0x10 [ 287.684723][ T31] ret_from_fork+0x3fc/0x770 [ 287.684748][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.684776][ T31] ? __switch_to_asm+0x39/0x70 [ 287.684801][ T31] ? __switch_to_asm+0x33/0x70 [ 287.684826][ T31] ? __pfx_kthread+0x10/0x10 [ 287.684853][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.684884][ T31] [ 288.107730][ T31] Kernel Offset: disabled [ 288.112063][ T31] Rebooting in 86400 seconds..