./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2252808973 <...> Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. execve("./syz-executor2252808973", ["./syz-executor2252808973"], 0x7ffc1ca3e820 /* 10 vars */) = 0 brk(NULL) = 0x555556a09000 brk(0x555556a09d00) = 0x555556a09d00 arch_prctl(ARCH_SET_FS, 0x555556a09380) = 0 set_tid_address(0x555556a09650) = 5024 set_robust_list(0x555556a09660, 24) = 0 rseq(0x555556a09ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2252808973", 4096) = 28 getrandom("\xab\xc5\xec\xc3\xe0\xd7\xbc\x8b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556a09d00 brk(0x555556a2ad00) = 0x555556a2ad00 brk(0x555556a2b000) = 0x555556a2b000 mprotect(0x7f572f30d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a09650) = 5025 ./strace-static-x86_64: Process 5025 attached [pid 5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5025] set_robust_list(0x555556a09660, 24) = 0 [pid 5025] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5026 attached [pid 5026] set_robust_list(0x555556a09660, 24) = 0 [pid 5024] <... clone resumed>, child_tidptr=0x555556a09650) = 5026 [pid 5026] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5026] <... clone resumed>, child_tidptr=0x555556a09650) = 5027 ./strace-static-x86_64: Process 5027 attached [pid 5027] set_robust_list(0x555556a09660, 24) = 0 [pid 5027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5024] <... clone resumed>, child_tidptr=0x555556a09650) = 5029 [pid 5025] <... clone resumed>, child_tidptr=0x555556a09650) = 5028 ./strace-static-x86_64: Process 5029 attached ./strace-static-x86_64: Process 5028 attached [pid 5027] <... prctl resumed>) = 0 [pid 5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a09650) = 5030 [pid 5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5030 attached [pid 5029] set_robust_list(0x555556a09660, 24 [pid 5028] set_robust_list(0x555556a09660, 24 [pid 5027] setpgid(0, 0./strace-static-x86_64: Process 5031 attached [pid 5030] set_robust_list(0x555556a09660, 24 [pid 5029] <... set_robust_list resumed>) = 0 [pid 5028] <... set_robust_list resumed>) = 0 [pid 5027] <... setpgid resumed>) = 0 [pid 5024] <... clone resumed>, child_tidptr=0x555556a09650) = 5031 [pid 5031] set_robust_list(0x555556a09660, 24 [pid 5030] <... set_robust_list resumed>) = 0 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5024] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5031] <... set_robust_list resumed>) = 0 [pid 5030] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5028] <... prctl resumed>) = 0 [pid 5027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5031] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5028] setpgid(0, 0 [pid 5027] <... openat resumed>) = 3 [pid 5024] <... clone resumed>, child_tidptr=0x555556a09650) = 5032 [pid 5029] <... clone resumed>, child_tidptr=0x555556a09650) = 5033 [pid 5027] write(3, "1000", 4 [pid 5028] <... setpgid resumed>) = 0 [pid 5027] <... write resumed>) = 4 [pid 5027] close(3) = 0 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5027] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5028] <... openat resumed>) = 3 [pid 5027] dup(3 [pid 5028] write(3, "1000", 4 [pid 5027] <... dup resumed>) = 4 [pid 5028] <... write resumed>) = 4 [pid 5027] sendmsg(-1, NULL, 0 [pid 5028] close(3 [pid 5027] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5027] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807./strace-static-x86_64: Process 5035 attached ./strace-static-x86_64: Process 5034 attached ./strace-static-x86_64: Process 5033 attached ./strace-static-x86_64: Process 5032 attached [pid 5028] <... close resumed>) = 0 [pid 5035] set_robust_list(0x555556a09660, 24 [pid 5034] set_robust_list(0x555556a09660, 24 [pid 5033] set_robust_list(0x555556a09660, 24 [pid 5032] set_robust_list(0x555556a09660, 24 [pid 5031] <... clone resumed>, child_tidptr=0x555556a09650) = 5034 [pid 5030] <... clone resumed>, child_tidptr=0x555556a09650) = 5035 [pid 5028] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5033] <... set_robust_list resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5028] <... openat resumed>) = 3 [pid 5034] <... set_robust_list resumed>) = 0 [pid 5028] dup(3 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] <... set_robust_list resumed>) = 0 [pid 5028] <... dup resumed>) = 4 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5034] <... prctl resumed>) = 0 [pid 5033] <... openat resumed>) = 3 [pid 5032] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5028] sendmsg(-1, NULL, 0./strace-static-x86_64: Process 5036 attached [pid 5035] <... prctl resumed>) = 0 [pid 5034] setpgid(0, 0 [pid 5033] write(3, "1000", 4 [pid 5028] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5036] set_robust_list(0x555556a09660, 24 [pid 5035] setpgid(0, 0 [pid 5034] <... setpgid resumed>) = 0 [pid 5033] <... write resumed>) = 4 [pid 5032] <... clone resumed>, child_tidptr=0x555556a09650) = 5036 [pid 5028] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5036] <... set_robust_list resumed>) = 0 [pid 5035] <... setpgid resumed>) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] close(3 [pid 5036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5034] <... openat resumed>) = 3 [pid 5033] <... close resumed>) = 0 [pid 5036] <... prctl resumed>) = 0 [pid 5035] <... openat resumed>) = 3 [pid 5034] write(3, "1000", 4 [pid 5033] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5036] setpgid(0, 0 [pid 5035] write(3, "1000", 4 [pid 5034] <... write resumed>) = 4 [pid 5033] <... openat resumed>) = 3 [pid 5036] <... setpgid resumed>) = 0 [pid 5035] <... write resumed>) = 4 [pid 5034] close(3 [pid 5033] dup(3 [pid 5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5035] close(3 [pid 5034] <... close resumed>) = 0 [pid 5033] <... dup resumed>) = 4 [pid 5036] <... openat resumed>) = 3 [pid 5035] <... close resumed>) = 0 [pid 5033] sendmsg(-1, NULL, 0 [pid 5034] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5036] write(3, "1000", 4 [pid 5035] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5034] <... openat resumed>) = 3 [pid 5033] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5036] <... write resumed>) = 4 [pid 5035] <... openat resumed>) = 3 [pid 5034] dup(3 [pid 5033] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5036] close(3 [pid 5035] dup(3 [pid 5034] <... dup resumed>) = 4 [pid 5036] <... close resumed>) = 0 [pid 5035] <... dup resumed>) = 4 [pid 5034] sendmsg(-1, NULL, 0 [pid 5036] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5035] sendmsg(-1, NULL, 0 [pid 5034] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5036] <... openat resumed>) = 3 [pid 5035] <... sendmsg resumed>) = -1 EBADF (Bad file descriptor) [pid 5034] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5036] dup(3 [pid 5035] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5036] <... dup resumed>) = 4 [pid 5036] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5036] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5026] kill(-5027, SIGKILL) = 0 [pid 5026] kill(5027, SIGKILL) = 0 [pid 5029] kill(-5033, SIGKILL [pid 5025] kill(-5028, SIGKILL) = 0 [pid 5029] <... kill resumed>) = 0 [pid 5025] kill(5028, SIGKILL [pid 5029] kill(5033, SIGKILL [pid 5025] <... kill resumed>) = 0 [pid 5029] <... kill resumed>) = 0 [pid 5031] kill(-5034, SIGKILL) = 0 [pid 5031] kill(5034, SIGKILL) = 0 [pid 5030] kill(-5035, SIGKILL) = 0 [pid 5030] kill(5035, SIGKILL) = 0 [pid 5032] kill(-5036, SIGKILL) = 0 [pid 5032] kill(5036, SIGKILL) = 0 [pid 5026] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5029] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5026] <... openat resumed>) = 3 [pid 5030] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5025] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5030] <... openat resumed>) = 3 [pid 5025] <... openat resumed>) = 3 [pid 5030] newfstatat(3, "", [pid 5029] <... openat resumed>) = 3 [pid 5025] newfstatat(3, "", [pid 5030] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5025] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5029] newfstatat(3, "", [pid 5032] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5030] getdents64(3, [pid 5029] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5025] getdents64(3, [pid 5032] newfstatat(3, "", [pid 5025] <... getdents64 resumed>0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5032] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5030] <... getdents64 resumed>0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5025] getdents64(3, [pid 5032] getdents64(3, [pid 5030] getdents64(3, [pid 5025] <... getdents64 resumed>0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5032] <... getdents64 resumed>0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5029] getdents64(3, [pid 5032] getdents64(3, [pid 5030] <... getdents64 resumed>0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5025] close(3 [pid 5032] <... getdents64 resumed>0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5030] close(3 [pid 5029] <... getdents64 resumed>0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5032] close(3 [pid 5030] <... close resumed>) = 0 [pid 5025] <... close resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5029] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5026] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5029] close(3 [pid 5026] getdents64(3, 0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5029] <... close resumed>) = 0 [pid 5026] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5026] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5031] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5031] getdents64(3, 0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5031] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5031] close(3) = 0 [ 81.811403][ T9] cfg80211: failed to load regulatory.db [pid 5027] <... fallocate resumed>) = ? [pid 5027] +++ killed by SIGKILL +++ [pid 5026] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5027, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=5404 /* 54.04 s */} --- [pid 5026] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5054 attached [pid 5054] set_robust_list(0x555556a09660, 24) = 0 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5026] <... clone resumed>, child_tidptr=0x555556a09650) = 5054 [pid 5054] <... openat resumed>) = 3 [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5054] dup(3) = 4 [pid 5054] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5054] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5026] kill(-5054, SIGKILL) = 0 [pid 5026] kill(5054, SIGKILL) = 0 [pid 5026] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5026] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5026] getdents64(3, 0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5026] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5026] close(3) = 0 [pid 5028] <... fallocate resumed>) = ? [pid 5028] +++ killed by SIGKILL +++ [pid 5025] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5028, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=5138 /* 51.38 s */} --- [pid 5025] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a09650) = 5055 ./strace-static-x86_64: Process 5055 attached [pid 5055] set_robust_list(0x555556a09660, 24) = 0 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5055] dup(3) = 4 [pid 5055] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5055] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5025] kill(-5055, SIGKILL) = 0 [pid 5025] kill(5055, SIGKILL) = 0 [pid 5025] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5025] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5025] getdents64(3, 0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5025] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5025] close(3) = 0 [pid 5033] <... fallocate resumed>) = ? [pid 5033] +++ killed by SIGKILL +++ [pid 5029] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5033, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=5114 /* 51.14 s */} --- [pid 5029] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556a09650) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555556a09660, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5062] dup(3) = 4 [pid 5062] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5062] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5029] kill(-5062, SIGKILL) = 0 [pid 5029] kill(5062, SIGKILL) = 0 [pid 5029] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5029] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5029] getdents64(3, 0x555556a0a6f0 /* 2 entries */, 32768) = 48 [pid 5029] getdents64(3, 0x555556a0a6f0 /* 0 entries */, 32768) = 0 [pid 5029] close(3) = 0 [ 286.598618][ T28] INFO: task syz-executor225:5035 blocked for more than 143 seconds. [ 286.606824][ T28] Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 286.614752][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.625405][ T28] task:syz-executor225 state:D stack:28176 pid:5035 ppid:5030 flags:0x00004006 [ 286.635969][ T28] Call Trace: [ 286.640162][ T28] [ 286.644007][ T28] __schedule+0xee1/0x59f0 [ 286.655351][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.662465][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 286.668527][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.673853][ T28] ? rwsem_down_write_slowpath+0x48f/0x1290 [ 286.680006][ T28] schedule+0xe7/0x1b0 [ 286.684425][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.690871][ T28] rwsem_down_write_slowpath+0x53e/0x1290 [ 286.697549][ T28] ? down_timeout+0x90/0x90 [ 286.702142][ T28] ? lock_sync+0x190/0x190 [ 286.706680][ T28] ? preempt_count_sub+0x150/0x150 [ 286.712833][ T28] down_write+0x1d3/0x200 [ 286.718280][ T28] ? down_write_killable_nested+0x250/0x250 [ 286.724280][ T28] blkdev_fallocate+0x1e6/0x3e0 [ 286.732871][ T28] ? file_to_blk_mode+0x130/0x130 [ 286.737933][ T28] vfs_fallocate+0x46c/0xe80 [ 286.743636][ T28] __x64_sys_fallocate+0xd5/0x140 [ 286.749741][ T28] do_syscall_64+0x38/0xb0 [ 286.755142][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.761970][ T28] RIP: 0033:0x7f572f29ab29 [ 286.767312][ T28] RSP: 002b:00007ffd087021c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.775864][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f572f29ab29 [ 286.784359][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.792546][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.800949][ T28] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 286.809548][ T28] R13: 00007ffd087023e8 R14: 00007ffd087021f0 R15: 00007ffd087021e0 [ 286.818299][ T28] [ 286.821798][ T28] INFO: task syz-executor225:5036 blocked for more than 143 seconds. [ 286.830325][ T28] Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 286.838364][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.847423][ T28] task:syz-executor225 state:D stack:28176 pid:5036 ppid:5032 flags:0x00004006 [ 286.856759][ T28] Call Trace: [ 286.860460][ T28] [ 286.863770][ T28] __schedule+0xee1/0x59f0 [ 286.869302][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.876265][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 286.881920][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.887247][ T28] ? rwsem_down_write_slowpath+0x48f/0x1290 [ 286.898525][ T28] schedule+0xe7/0x1b0 [ 286.902642][ T28] schedule_preempt_disabled+0x13/0x20 [ 286.916072][ T28] rwsem_down_write_slowpath+0x53e/0x1290 [ 286.921937][ T28] ? down_timeout+0x90/0x90 [ 286.926487][ T28] ? lock_sync+0x190/0x190 [ 286.931018][ T28] ? preempt_count_sub+0x150/0x150 [ 286.936698][ T28] down_write+0x1d3/0x200 [ 286.941500][ T28] ? down_write_killable_nested+0x250/0x250 [ 286.947795][ T28] blkdev_fallocate+0x1e6/0x3e0 [ 286.953113][ T28] ? file_to_blk_mode+0x130/0x130 [ 286.958577][ T28] vfs_fallocate+0x46c/0xe80 [ 286.963559][ T28] __x64_sys_fallocate+0xd5/0x140 [ 286.969074][ T28] do_syscall_64+0x38/0xb0 [ 286.973876][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.979845][ T28] RIP: 0033:0x7f572f29ab29 [ 286.984285][ T28] RSP: 002b:00007ffd087021c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.993246][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f572f29ab29 [ 287.001627][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.010296][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.018691][ T28] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 287.027047][ T28] R13: 00007ffd087023e8 R14: 00007ffd087021f0 R15: 00007ffd087021e0 [ 287.035516][ T28] [ 287.038962][ T28] INFO: task syz-executor225:5054 blocked for more than 143 seconds. [ 287.047503][ T28] Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 287.055162][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.064257][ T28] task:syz-executor225 state:D stack:27128 pid:5054 ppid:5026 flags:0x00004006 [ 287.073605][ T28] Call Trace: [ 287.076951][ T28] [ 287.081411][ T28] __schedule+0xee1/0x59f0 [ 287.086132][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.092228][ T28] ? print_usage_bug.part.0+0x670/0x670 [ 287.097825][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.103544][ T28] ? rwsem_down_write_slowpath+0x48f/0x1290 [ 287.109551][ T28] schedule+0xe7/0x1b0 [ 287.113658][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.119560][ T28] rwsem_down_write_slowpath+0x53e/0x1290 [ 287.125698][ T28] ? down_timeout+0x90/0x90 [ 287.130681][ T28] ? lock_sync+0x190/0x190 [ 287.135524][ T28] ? preempt_count_sub+0x150/0x150 [ 287.141092][ T28] down_write+0x1d3/0x200 [ 287.145826][ T28] ? down_write_killable_nested+0x250/0x250 [ 287.152198][ T28] blkdev_fallocate+0x1e6/0x3e0 [ 287.157100][ T28] ? file_to_blk_mode+0x130/0x130 [ 287.162194][ T28] vfs_fallocate+0x46c/0xe80 [ 287.167191][ T28] __x64_sys_fallocate+0xd5/0x140 [ 287.172657][ T28] do_syscall_64+0x38/0xb0 [ 287.177473][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.183826][ T28] RIP: 0033:0x7f572f29ab29 [ 287.188657][ T28] RSP: 002b:00007ffd087021c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.197475][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f572f29ab29 [ 287.205844][ T28] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.214248][ T28] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.222281][ T28] R10: 7fffffffffffffff R11: 0000000000000246 R12: 000000000000e125 [ 287.230691][ T28] R13: 00007ffd087021dc R14: 00007ffd087021f0 R15: 00007ffd087021e0 [ 287.239110][ T28] [ 287.242542][ T28] [ 287.242542][ T28] Showing all locks held in the system: [ 287.250988][ T28] 1 lock held by rcu_tasks_kthre/13: [ 287.256656][ T28] #0: ffffffff8c9a5970 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.267522][ T28] 1 lock held by rcu_tasks_trace/14: [ 287.273242][ T28] #0: ffffffff8c9a5670 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.284662][ T28] 1 lock held by khungtaskd/28: [ 287.289607][ T28] #0: ffffffff8c9a6580 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 287.299976][ T28] 1 lock held by klogd/4469: [ 287.304960][ T28] 2 locks held by getty/4780: [ 287.310151][ T28] #0: ffff88802cf5a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.320416][ T28] #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 287.330662][ T28] 1 lock held by syz-executor225/5034: [ 287.336443][ T28] 1 lock held by syz-executor225/5035: [ 287.342945][ T28] #0: ffff8881488670c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e6/0x3e0 [ 287.354994][ T28] 1 lock held by syz-executor225/5036: [ 287.361578][ T28] #0: ffff8881488670c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e6/0x3e0 [ 287.373537][ T28] 1 lock held by syz-executor225/5054: [ 287.379408][ T28] #0: ffff8881488670c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e6/0x3e0 [ 287.390468][ T28] 1 lock held by syz-executor225/5055: [ 287.396278][ T28] #0: ffff8881488670c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e6/0x3e0 [ 287.407439][ T28] 1 lock held by syz-executor225/5062: [ 287.413381][ T28] #0: ffff8881488670c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e6/0x3e0 [ 287.424605][ T28] [ 287.427301][ T28] ============================================= [ 287.427301][ T28] [ 287.435887][ T28] NMI backtrace for cpu 1 [ 287.440226][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 287.450050][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.460121][ T28] Call Trace: [ 287.463387][ T28] [ 287.466304][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.470924][ T28] nmi_cpu_backtrace+0x277/0x380 [ 287.475871][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.481102][ T28] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 287.487194][ T28] watchdog+0xf29/0x11b0 [ 287.491470][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.497455][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.503444][ T28] kthread+0x33a/0x430 [ 287.507606][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.513512][ T28] ret_from_fork+0x2c/0x70 [ 287.517952][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.523687][ T28] ret_from_fork_asm+0x11/0x20 [ 287.528469][ T28] RIP: 0000:0x0 [ 287.532008][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 287.539370][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 287.548117][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 287.556193][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.564269][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.572345][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 287.580320][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.588306][ T28] [ 287.591775][ T28] Sending NMI from CPU 1 to CPUs 0: [ 287.597014][ C0] NMI backtrace for cpu 0 [ 287.597025][ C0] CPU: 0 PID: 4469 Comm: klogd Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 287.597046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.597055][ C0] RIP: 0010:__slab_free+0x3d/0x480 [ 287.597108][ C0] Code: 54 53 48 89 d3 48 83 e4 f0 48 83 c4 80 48 8d 54 24 40 48 89 7c 24 30 48 89 4c 24 28 48 89 d7 b9 08 00 00 00 48 89 da f3 48 ab <48> 8b 05 a4 73 d1 0c 48 29 c2 48 81 fa ff ff 1f 00 77 09 48 85 c0 [ 287.597126][ C0] RSP: 0018:ffffc9000319f720 EFLAGS: 00000283 [ 287.597141][ C0] RAX: 0000000000000000 RBX: ffff88807b134400 RCX: 0000000000000000 [ 287.597153][ C0] RDX: ffff88807b134400 RSI: ffffea0001ec4c00 RDI: ffffc9000319f7a0 [ 287.597166][ C0] RBP: ffffc9000319f7d0 R08: 0000000000000001 R09: ffffffff81da84cc [ 287.597177][ C0] R10: 0000000000000000 R11: dffffc0000000000 R12: dffffc0000000000 [ 287.597189][ C0] R13: ffffc9000319f820 R14: 0000000000000001 R15: ffffea0001ec4c00 [ 287.597201][ C0] FS: 00007fafbca99380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.597220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.597233][ C0] CR2: 00007f572f3110d0 CR3: 000000002c545000 CR4: 00000000003506f0 [ 287.597245][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.597255][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.597267][ C0] Call Trace: [ 287.597271][ C0] [ 287.597277][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.597306][ C0] ? __slab_free+0x3d/0x480 [ 287.597327][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.597352][ C0] ? nmi_handle+0x145/0x400 [ 287.597373][ C0] ? irqentry_nmi_enter+0x7f/0x90 [ 287.597396][ C0] ? __slab_free+0x3d/0x480 [ 287.597416][ C0] ? default_do_nmi+0x69/0x160 [ 287.597436][ C0] ? exc_nmi+0x171/0x1e0 [ 287.597454][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.597484][ C0] ? qlist_free_all+0x4c/0x170 [ 287.597513][ C0] ? __slab_free+0x3d/0x480 [ 287.597533][ C0] ? __slab_free+0x3d/0x480 [ 287.597554][ C0] ? __slab_free+0x3d/0x480 [ 287.597574][ C0] [ 287.597579][ C0] [ 287.597592][ C0] qlist_free_all+0x6a/0x170 [ 287.597619][ C0] ? __alloc_skb+0x12b/0x330 [ 287.597665][ C0] kasan_quarantine_reduce+0x18b/0x1d0 [ 287.597684][ C0] __kasan_kmalloc+0x86/0xb0 [ 287.597706][ C0] __kmalloc_node_track_caller+0x5e/0x100 [ 287.597737][ C0] kmalloc_reserve+0xef/0x270 [ 287.597758][ C0] __alloc_skb+0x12b/0x330 [ 287.597778][ C0] ? __napi_build_skb+0x50/0x50 [ 287.597798][ C0] ? __lock_acquire+0x182f/0x5de0 [ 287.597826][ C0] alloc_skb_with_frags+0x9d/0x700 [ 287.597849][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.597876][ C0] sock_alloc_send_pskb+0x7c8/0x950 [ 287.597948][ C0] ? sock_wmalloc+0x120/0x120 [ 287.597972][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.597996][ C0] ? do_raw_spin_lock+0x12e/0x2b0 [ 287.598020][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.598045][ C0] unix_dgram_sendmsg+0x455/0x1c30 [ 287.598110][ C0] ? aa_sk_perm+0x2c1/0xae0 [ 287.598139][ C0] ? unix_dgram_connect+0xba0/0xba0 [ 287.598161][ C0] ? aa_af_perm+0x260/0x260 [ 287.598186][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.598213][ C0] ? unix_dgram_connect+0xba0/0xba0 [ 287.598236][ C0] sock_sendmsg+0xd9/0x180 [ 287.598256][ C0] __sys_sendto+0x255/0x340 [ 287.598277][ C0] ? __ia32_sys_getpeername+0xb0/0xb0 [ 287.598304][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.598328][ C0] ? preempt_count_sub+0x150/0x150 [ 287.598370][ C0] __x64_sys_sendto+0xe0/0x1b0 [ 287.598391][ C0] ? syscall_enter_from_user_mode+0x26/0x80 [ 287.598416][ C0] do_syscall_64+0x38/0xb0 [ 287.598431][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 287.598448][ C0] RIP: 0033:0x7fafbcbfb9b5 [ 287.598462][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 287.598484][ C0] RSP: 002b:00007ffd1702cf88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.598501][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fafbcbfb9b5 [ 287.598513][ C0] RDX: 0000000000000039 RSI: 0000559e61d36d80 RDI: 0000000000000003 [ 287.598524][ C0] RBP: 0000559e61d32910 R08: 0000000000000000 R09: 0000000000000000 [ 287.598535][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 287.598546][ C0] R13: 00007fafbcd89212 R14: 00007ffd1702d088 R15: 0000000000000000 [ 287.598565][ C0] [ 287.598571][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.557 msecs [ 287.599447][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 287.599456][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.5.0-rc3-syzkaller-00297-gd31e3792919e #0 [ 287.599478][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.599489][ T28] Call Trace: [ 287.599495][ T28] [ 287.599502][ T28] dump_stack_lvl+0xd9/0x1b0 [ 287.599528][ T28] panic+0x6a4/0x750 [ 287.599553][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 287.599580][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.599612][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 287.599646][ T28] ? watchdog+0xce1/0x11b0 [ 287.599680][ T28] watchdog+0xcf2/0x11b0 [ 287.599713][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.599750][ T28] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.599780][ T28] kthread+0x33a/0x430 [ 287.599801][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.599825][ T28] ret_from_fork+0x2c/0x70 [ 287.599848][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 287.599871][ T28] ret_from_fork_asm+0x11/0x20 [ 287.599898][ T28] RIP: 0000:0x0 [ 287.599918][ T28] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 287.599926][ T28] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 287.599946][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 287.599958][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.599970][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.599987][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 287.600000][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.600026][ T28] [ 287.603203][ T28] Kernel Offset: disabled [ 288.215738][ T28] Rebooting in 86400 seconds..