./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3047781544 <...> Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. execve("./syz-executor3047781544", ["./syz-executor3047781544"], 0x7fff53030af0 /* 10 vars */) = 0 brk(NULL) = 0x555581aae000 brk(0x555581aaed00) = 0x555581aaed00 arch_prctl(ARCH_SET_FS, 0x555581aae380) = 0 set_tid_address(0x555581aae650) = 5090 set_robust_list(0x555581aae660, 24) = 0 rseq(0x555581aaeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3047781544", 4096) = 28 getrandom("\xcb\x7f\x01\x47\x69\xff\xe6\xf0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555581aaed00 brk(0x555581acfd00) = 0x555581acfd00 brk(0x555581ad0000) = 0x555581ad0000 mprotect(0x7ff40f6b0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x555581aae660, 24 [pid 5090] <... clone resumed>, child_tidptr=0x555581aae650) = 5091 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached ./strace-static-x86_64: Process 5092 attached , child_tidptr=0x555581aae650) = 5092 [pid 5093] set_robust_list(0x555581aae660, 24) = 0 [pid 5093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] set_robust_list(0x555581aae660, 24 [pid 5091] <... clone resumed>, child_tidptr=0x555581aae650) = 5093 [pid 5093] <... prctl resumed>) = 0 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5093] setpgid(0, 0 [pid 5092] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5094 attached [pid 5093] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5095 attached [pid 5090] <... clone resumed>, child_tidptr=0x555581aae650) = 5094 [pid 5094] set_robust_list(0x555581aae660, 24 [pid 5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] <... clone resumed>, child_tidptr=0x555581aae650) = 5095 [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] set_robust_list(0x555581aae660, 24 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5094] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5093] <... openat resumed>) = 3 [pid 5093] write(3, "1000", 4./strace-static-x86_64: Process 5097 attached ./strace-static-x86_64: Process 5096 attached [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] <... clone resumed>, child_tidptr=0x555581aae650) = 5096 [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] set_robust_list(0x555581aae660, 24 [pid 5096] set_robust_list(0x555581aae660, 24 [pid 5095] <... prctl resumed>) = 0 [pid 5094] <... clone resumed>, child_tidptr=0x555581aae650) = 5097 [pid 5093] <... write resumed>) = 4 [pid 5095] setpgid(0, 0 [pid 5093] close(3./strace-static-x86_64: Process 5098 attached [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5095] <... setpgid resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5090] <... clone resumed>, child_tidptr=0x555581aae650) = 5098 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5093] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5095] <... openat resumed>) = 3 [pid 5093] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5099 attached [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5098] set_robust_list(0x555581aae660, 24 [pid 5097] <... prctl resumed>) = 0 [pid 5095] write(3, "1000", 4 [pid 5093] dup(3 [pid 5099] set_robust_list(0x555581aae660, 24 [pid 5098] <... set_robust_list resumed>) = 0 [pid 5098] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] setpgid(0, 0 [pid 5096] <... clone resumed>, child_tidptr=0x555581aae650) = 5099 [pid 5095] <... write resumed>) = 4 [pid 5093] <... dup resumed>) = 4 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5097] <... setpgid resumed>) = 0 [pid 5095] close(3 [pid 5093] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5095] <... close resumed>) = 0 ./strace-static-x86_64: Process 5100 attached ./strace-static-x86_64: Process 5101 attached [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5090] <... clone resumed>, child_tidptr=0x555581aae650) = 5101 [pid 5100] set_robust_list(0x555581aae660, 24 [pid 5101] set_robust_list(0x555581aae660, 24 [pid 5099] <... prctl resumed>) = 0 [pid 5098] <... clone resumed>, child_tidptr=0x555581aae650) = 5100 [pid 5097] <... openat resumed>) = 3 [pid 5095] <... openat resumed>) = 3 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5099] setpgid(0, 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] <... setpgid resumed>) = 0 [pid 5097] write(3, "1000", 4 [pid 5095] dup(3 [pid 5100] <... prctl resumed>) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5097] <... write resumed>) = 4 [pid 5100] setpgid(0, 0./strace-static-x86_64: Process 5102 attached ) = 0 [pid 5099] <... openat resumed>) = 3 [pid 5097] close(3 [pid 5095] <... dup resumed>) = 4 [pid 5102] set_robust_list(0x555581aae660, 24 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] <... clone resumed>, child_tidptr=0x555581aae650) = 5102 [pid 5099] write(3, "1000", 4 [pid 5097] <... close resumed>) = 0 [pid 5095] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5100] <... openat resumed>) = 3 [pid 5099] <... write resumed>) = 4 [pid 5097] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] write(3, "1000", 4 [pid 5099] close(3 [pid 5102] <... prctl resumed>) = 0 [pid 5100] <... write resumed>) = 4 [pid 5099] <... close resumed>) = 0 [pid 5097] <... openat resumed>) = 3 [pid 5102] setpgid(0, 0 [pid 5100] close(3 [pid 5099] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5097] dup(3 [pid 5100] <... close resumed>) = 0 [pid 5097] <... dup resumed>) = 4 [pid 5102] <... setpgid resumed>) = 0 [pid 5097] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5100] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5099] <... openat resumed>) = 3 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5100] <... openat resumed>) = 3 [pid 5099] dup(3 [pid 5102] <... openat resumed>) = 3 [pid 5100] dup(3 [pid 5099] <... dup resumed>) = 4 [pid 5100] <... dup resumed>) = 4 [pid 5099] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5102] write(3, "1000", 4 [pid 5100] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5102] <... write resumed>) = 4 [pid 5102] close(3) = 0 [pid 5102] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5102] dup(3) = 4 [pid 5102] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5091] kill(-5093, SIGKILL) = 0 [pid 5091] kill(5093, SIGKILL) = 0 [pid 5092] kill(-5095, SIGKILL) = 0 [pid 5092] kill(5095, SIGKILL) = 0 [pid 5094] kill(-5097, SIGKILL) = 0 [pid 5094] kill(5097, SIGKILL) = 0 [pid 5098] kill(-5100, SIGKILL) = 0 [pid 5098] kill(5100, SIGKILL) = 0 [pid 5096] kill(-5099, SIGKILL) = 0 [pid 5096] kill(5099, SIGKILL) = 0 [pid 5101] kill(-5102, SIGKILL) = 0 [pid 5101] kill(5102, SIGKILL) = 0 [pid 5101] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5094] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5094] newfstatat(3, "", [pid 5101] newfstatat(3, "", [pid 5094] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5101] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5098] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5094] getdents64(3, [pid 5101] getdents64(3, [pid 5094] <... getdents64 resumed>0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5098] <... openat resumed>) = 3 [pid 5101] <... getdents64 resumed>0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5098] newfstatat(3, "", [pid 5101] getdents64(3, [pid 5098] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5101] <... getdents64 resumed>0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5101] close(3 [pid 5098] getdents64(3, [pid 5096] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] <... close resumed>) = 0 [pid 5094] getdents64(3, [pid 5098] <... getdents64 resumed>0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5096] <... openat resumed>) = 3 [pid 5094] <... getdents64 resumed>0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5094] close(3 [pid 5098] getdents64(3, [pid 5096] newfstatat(3, "", [pid 5094] <... close resumed>) = 0 [pid 5098] <... getdents64 resumed>0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5096] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5091] newfstatat(3, "", [pid 5098] close(3 [pid 5096] getdents64(3, [pid 5091] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5098] <... close resumed>) = 0 [pid 5091] getdents64(3, [pid 5096] <... getdents64 resumed>0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5096] getdents64(3, 0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5091] <... getdents64 resumed>0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5096] close(3 [pid 5091] getdents64(3, [pid 5096] <... close resumed>) = 0 [pid 5091] <... getdents64 resumed>0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5091] close(3 [pid 5092] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5091] <... close resumed>) = 0 [pid 5092] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5092] getdents64(3, 0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5092] getdents64(3, 0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5092] close(3) = 0 [ 86.390792][ T24] cfg80211: failed to load regulatory.db [pid 5093] <... fallocate resumed>) = ? [pid 5093] +++ killed by SIGKILL +++ [pid 5091] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5093, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=7750 /* 77.50 s */} --- [pid 5091] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5121 attached , child_tidptr=0x555581aae650) = 5121 [pid 5121] set_robust_list(0x555581aae660, 24) = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [pid 5121] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5121] dup(3) = 4 [pid 5121] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 8796109807616 [pid 5091] kill(-5121, SIGKILL) = 0 [pid 5091] kill(5121, SIGKILL) = 0 [pid 5091] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5091] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5091] getdents64(3, 0x555581aaf6f0 /* 2 entries */, 32768) = 48 [pid 5091] getdents64(3, 0x555581aaf6f0 /* 0 entries */, 32768) = 0 [pid 5091] close(3) = 0 [ 286.054082][ T29] INFO: task syz-executor304:5097 blocked for more than 143 seconds. [ 286.062359][ T29] Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 286.070443][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.079601][ T29] task:syz-executor304 state:D stack:26840 pid:5097 tgid:5097 ppid:5094 flags:0x00004006 [ 286.090267][ T29] Call Trace: [ 286.093571][ T29] [ 286.097003][ T29] __schedule+0x17e8/0x4a50 [ 286.102124][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.108544][ T29] ? __pfx___schedule+0x10/0x10 [ 286.113452][ T29] ? __pfx_lock_release+0x10/0x10 [ 286.118967][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.125455][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.131820][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.137012][ T29] ? schedule+0x90/0x320 [ 286.141300][ T29] schedule+0x14b/0x320 [ 286.145553][ T29] schedule_preempt_disabled+0x13/0x30 [ 286.151061][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.157293][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.163250][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.169926][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 286.175473][ T29] __down_write_common+0x1af/0x200 [ 286.181144][ T29] ? __pfx___down_write_common+0x10/0x10 [ 286.187327][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.193026][ T29] blkdev_fallocate+0x233/0x550 [ 286.198775][ T29] vfs_fallocate+0x566/0x6c0 [ 286.203886][ T29] __x64_sys_fallocate+0xbd/0x110 [ 286.209736][ T29] do_syscall_64+0xf5/0x240 [ 286.214344][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.220278][ T29] RIP: 0033:0x7ff40f63db29 [ 286.224781][ T29] RSP: 002b:00007ffda65b3c08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.233238][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff40f63db29 [ 286.241324][ T29] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.249694][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.257751][ T29] R10: 0000080001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.266546][ T29] R13: 00007ffda65b3e28 R14: 00007ffda65b3c30 R15: 00007ffda65b3c20 [ 286.275115][ T29] [ 286.278639][ T29] INFO: task syz-executor304:5099 blocked for more than 143 seconds. [ 286.287209][ T29] Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 286.295363][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.304533][ T29] task:syz-executor304 state:D stack:26840 pid:5099 tgid:5099 ppid:5096 flags:0x00004006 [ 286.315203][ T29] Call Trace: [ 286.318515][ T29] [ 286.321480][ T29] __schedule+0x17e8/0x4a50 [ 286.326550][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.332271][ T29] ? __pfx___schedule+0x10/0x10 [ 286.337246][ T29] ? __pfx_lock_release+0x10/0x10 [ 286.342567][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.348663][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.355550][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.361146][ T29] ? schedule+0x90/0x320 [ 286.365887][ T29] schedule+0x14b/0x320 [ 286.370515][ T29] schedule_preempt_disabled+0x13/0x30 [ 286.376496][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.382654][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.389071][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.395724][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 286.400790][ T29] __down_write_common+0x1af/0x200 [ 286.406002][ T29] ? __pfx___down_write_common+0x10/0x10 [ 286.411679][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.417814][ T29] blkdev_fallocate+0x233/0x550 [ 286.423130][ T29] vfs_fallocate+0x566/0x6c0 [ 286.428245][ T29] __x64_sys_fallocate+0xbd/0x110 [ 286.433722][ T29] do_syscall_64+0xf5/0x240 [ 286.438701][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.445118][ T29] RIP: 0033:0x7ff40f63db29 [ 286.449997][ T29] RSP: 002b:00007ffda65b3c08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.458945][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff40f63db29 [ 286.467014][ T29] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.475068][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.483065][ T29] R10: 0000080001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.491212][ T29] R13: 00007ffda65b3e28 R14: 00007ffda65b3c30 R15: 00007ffda65b3c20 [ 286.499796][ T29] [ 286.503325][ T29] INFO: task syz-executor304:5100 blocked for more than 143 seconds. [ 286.511481][ T29] Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 286.519079][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.528359][ T29] task:syz-executor304 state:D stack:26840 pid:5100 tgid:5100 ppid:5098 flags:0x00004006 [ 286.539040][ T29] Call Trace: [ 286.542756][ T29] [ 286.545773][ T29] __schedule+0x17e8/0x4a50 [ 286.550358][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.556072][ T29] ? __pfx___schedule+0x10/0x10 [ 286.561404][ T29] ? __pfx_lock_release+0x10/0x10 [ 286.566930][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.572953][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.579767][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.584986][ T29] ? schedule+0x90/0x320 [ 286.589274][ T29] schedule+0x14b/0x320 [ 286.593479][ T29] schedule_preempt_disabled+0x13/0x30 [ 286.599053][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.604866][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.611097][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.617353][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 286.622422][ T29] __down_write_common+0x1af/0x200 [ 286.628106][ T29] ? __pfx___down_write_common+0x10/0x10 [ 286.634591][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.640703][ T29] blkdev_fallocate+0x233/0x550 [ 286.646089][ T29] vfs_fallocate+0x566/0x6c0 [ 286.650749][ T29] __x64_sys_fallocate+0xbd/0x110 [ 286.656290][ T29] do_syscall_64+0xf5/0x240 [ 286.661260][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.667671][ T29] RIP: 0033:0x7ff40f63db29 [ 286.672531][ T29] RSP: 002b:00007ffda65b3c08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.681016][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff40f63db29 [ 286.689076][ T29] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.697528][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.705984][ T29] R10: 0000080001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.714442][ T29] R13: 00007ffda65b3e28 R14: 00007ffda65b3c30 R15: 00007ffda65b3c20 [ 286.722891][ T29] [ 286.726411][ T29] INFO: task syz-executor304:5102 blocked for more than 144 seconds. [ 286.735272][ T29] Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 286.742859][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.752151][ T29] task:syz-executor304 state:D stack:24184 pid:5102 tgid:5102 ppid:5101 flags:0x00004006 [ 286.762807][ T29] Call Trace: [ 286.766679][ T29] [ 286.769670][ T29] __schedule+0x17e8/0x4a50 [ 286.774364][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.780140][ T29] ? __pfx___schedule+0x10/0x10 [ 286.785099][ T29] ? __pfx_lock_release+0x10/0x10 [ 286.790165][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.796221][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.802583][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.807807][ T29] ? schedule+0x90/0x320 [ 286.812484][ T29] schedule+0x14b/0x320 [ 286.816740][ T29] schedule_preempt_disabled+0x13/0x30 [ 286.822657][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.828472][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.834895][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.841515][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 286.846636][ T29] __down_write_common+0x1af/0x200 [ 286.851800][ T29] ? __pfx___down_write_common+0x10/0x10 [ 286.857941][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.864116][ T29] blkdev_fallocate+0x233/0x550 [ 286.869416][ T29] vfs_fallocate+0x566/0x6c0 [ 286.874074][ T29] __x64_sys_fallocate+0xbd/0x110 [ 286.879554][ T29] do_syscall_64+0xf5/0x240 [ 286.884156][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.890089][ T29] RIP: 0033:0x7ff40f63db29 [ 286.894570][ T29] RSP: 002b:00007ffda65b3c08 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.903029][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff40f63db29 [ 286.911164][ T29] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.919194][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.927338][ T29] R10: 0000080001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.935884][ T29] R13: 00007ffda65b3e28 R14: 00007ffda65b3c30 R15: 00007ffda65b3c20 [ 286.943959][ T29] [ 286.947065][ T29] [ 286.947065][ T29] Showing all locks held in the system: [ 286.955806][ T29] 1 lock held by khungtaskd/29: [ 286.961749][ T29] #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.972555][ T29] 2 locks held by syslogd/4517: [ 286.977908][ T29] 2 locks held by klogd/4524: [ 286.982613][ T29] 2 locks held by getty/4843: [ 286.987384][ T29] #0: ffff88802b7730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.997243][ T29] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.007893][ T29] 1 lock held by syz-executor304/5095: [ 287.013808][ T29] 1 lock held by syz-executor304/5097: [ 287.019352][ T29] #0: ffff88801d53e548 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.030543][ T29] 1 lock held by syz-executor304/5099: [ 287.036068][ T29] #0: ffff88801d53e548 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.046839][ T29] 1 lock held by syz-executor304/5100: [ 287.052322][ T29] #0: ffff88801d53e548 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.063099][ T29] 1 lock held by syz-executor304/5102: [ 287.068678][ T29] #0: ffff88801d53e548 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.079486][ T29] 1 lock held by syz-executor304/5121: [ 287.085033][ T29] #0: ffff88801d53e548 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.095860][ T29] [ 287.098206][ T29] ============================================= [ 287.098206][ T29] [ 287.107213][ T29] NMI backtrace for cpu 1 [ 287.111567][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 287.121483][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.131585][ T29] Call Trace: [ 287.134889][ T29] [ 287.137848][ T29] dump_stack_lvl+0x241/0x360 [ 287.142578][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.147837][ T29] ? __pfx__printk+0x10/0x10 [ 287.152468][ T29] ? vprintk_emit+0x631/0x770 [ 287.157188][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 287.162258][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.167231][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.172758][ T29] ? _printk+0xd5/0x120 [ 287.176951][ T29] ? __pfx__printk+0x10/0x10 [ 287.181581][ T29] ? __wake_up_klogd+0xcc/0x110 [ 287.186473][ T29] ? __pfx__printk+0x10/0x10 [ 287.191100][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.196770][ T29] ? __rcu_read_unlock+0xa1/0x110 [ 287.201823][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.207915][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.213919][ T29] watchdog+0xfde/0x1020 [ 287.218188][ T29] ? watchdog+0x1ea/0x1020 [ 287.222626][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.227321][ T29] kthread+0x2f2/0x390 [ 287.231416][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.236197][ T29] ? __pfx_kthread+0x10/0x10 [ 287.240818][ T29] ret_from_fork+0x4d/0x80 [ 287.245265][ T29] ? __pfx_kthread+0x10/0x10 [ 287.249904][ T29] ret_from_fork_asm+0x1a/0x30 [ 287.254721][ T29] [ 287.257923][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.263156][ C0] NMI backtrace for cpu 0 [ 287.263170][ C0] CPU: 0 PID: 4524 Comm: klogd Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 287.263193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.263206][ C0] RIP: 0010:qlist_free_all+0x4c/0xc0 [ 287.263252][ C0] Code: 85 ff 75 0b 48 89 df e8 22 06 00 00 49 89 c4 4c 8b 2b 49 63 84 24 c0 00 00 00 48 29 c3 4c 89 e7 48 89 de e8 76 e7 ff ff 66 90 <48> 8d 15 00 00 00 00 4c 89 e7 48 89 de e8 52 7f f4 ff 4d 85 ed 75 [ 287.263270][ C0] RSP: 0018:ffffc9000361f630 EFLAGS: 00000293 [ 287.263290][ C0] RAX: ffff8880240063a0 RBX: ffff888024006300 RCX: 00000000000000a0 [ 287.263307][ C0] RDX: ffff8880240063a0 RSI: ffff888024006300 RDI: ffff88801fe96c80 [ 287.263325][ C0] RBP: ffff88806ea00860 R08: ffffffff81429eac R09: ffffffff81fa7263 [ 287.263343][ C0] R10: dffffc0000000000 R11: fffffbfff25e68a6 R12: ffff88801fe96c80 [ 287.263360][ C0] R13: ffff8880240064a0 R14: ffffc9000361f660 R15: 0000000000000000 [ 287.263380][ C0] FS: 00007f7c36fc0380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 287.263400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.263416][ C0] CR2: 00007fdf457cd580 CR3: 000000006855a000 CR4: 0000000000350ef0 [ 287.263434][ C0] Call Trace: [ 287.263442][ C0] [ 287.263451][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.263479][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.263508][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.263533][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.263571][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.263603][ C0] ? nmi_handle+0x151/0x5a0 [ 287.263627][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.263653][ C0] ? qlist_free_all+0x4c/0xc0 [ 287.263686][ C0] ? default_do_nmi+0x63/0x160 [ 287.263714][ C0] ? exc_nmi+0x123/0x1f0 [ 287.263740][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.263775][ C0] ? qlist_free_all+0x53/0xc0 [ 287.263807][ C0] ? __phys_addr+0xac/0x170 [ 287.263847][ C0] ? qlist_free_all+0x4c/0xc0 [ 287.263882][ C0] ? qlist_free_all+0x4c/0xc0 [ 287.263922][ C0] ? qlist_free_all+0x4c/0xc0 [ 287.263958][ C0] [ 287.263966][ C0] [ 287.263976][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 287.264016][ C0] __kasan_kmalloc+0x23/0xb0 [ 287.264054][ C0] __kmalloc_node_track_caller+0x24e/0x4e0 [ 287.264085][ C0] ? __alloc_skb+0x1f3/0x440 [ 287.264107][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264143][ C0] ? __alloc_skb+0x1f3/0x440 [ 287.264164][ C0] kmalloc_reserve+0x111/0x2a0 [ 287.264189][ C0] __alloc_skb+0x1f3/0x440 [ 287.264210][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264253][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 287.264273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264306][ C0] ? __entry_text_end+0x1020c5/0x1020c9 [ 287.264345][ C0] alloc_skb_with_frags+0xc3/0x770 [ 287.264381][ C0] sock_alloc_send_pskb+0x91a/0xa60 [ 287.264426][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 287.264459][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264491][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.264528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264565][ C0] unix_dgram_sendmsg+0x6d3/0x1f80 [ 287.264607][ C0] ? aa_sk_perm+0x967/0xab0 [ 287.264637][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.264669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264703][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 287.264729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264761][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264793][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 287.264829][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.264857][ C0] __sock_sendmsg+0x223/0x270 [ 287.264893][ C0] __sys_sendto+0x3a4/0x4f0 [ 287.264921][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 287.264963][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264996][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.265023][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.265053][ C0] __x64_sys_sendto+0xde/0x100 [ 287.265079][ C0] do_syscall_64+0xf5/0x240 [ 287.265115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.265150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.265179][ C0] RIP: 0033:0x7f7c371229b5 [ 287.265198][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 287.265222][ C0] RSP: 002b:00007ffd606c0b98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.265244][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7c371229b5 [ 287.265260][ C0] RDX: 0000000000000073 RSI: 000055c4a5a69a40 RDI: 0000000000000003 [ 287.265275][ C0] RBP: 000055c4a5a65910 R08: 0000000000000000 R09: 0000000000000000 [ 287.265290][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 287.265304][ C0] R13: 00007f7c372b0212 R14: 00007ffd606c0c98 R15: 0000000000000000 [ 287.265333][ C0] [ 287.265342][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.186 msecs [ 287.266671][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.266686][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 287.266719][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 287.266734][ T29] Call Trace: [ 287.266744][ T29] [ 287.266755][ T29] dump_stack_lvl+0x241/0x360 [ 287.266798][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.266837][ T29] ? __pfx__printk+0x10/0x10 [ 287.266871][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.266907][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.266943][ T29] ? vscnprintf+0x5d/0x90 [ 287.266973][ T29] panic+0x349/0x860 [ 287.267008][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.267045][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.267077][ T29] ? __pfx_panic+0x10/0x10 [ 287.267110][ T29] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.267147][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.267182][ T29] ? __irq_work_queue_local+0x137/0x410 [ 287.267221][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.267256][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.267285][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.267313][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.267345][ T29] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.267379][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.267412][ T29] watchdog+0x101d/0x1020 [ 287.267441][ T29] ? watchdog+0x1ea/0x1020 [ 287.267473][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.267499][ T29] kthread+0x2f2/0x390 [ 287.267532][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.267556][ T29] ? __pfx_kthread+0x10/0x10 [ 287.267590][ T29] ret_from_fork+0x4d/0x80 [ 287.267647][ T29] ? __pfx_kthread+0x10/0x10 [ 287.267680][ T29] ret_from_fork_asm+0x1a/0x30 [ 287.267738][ T29] [ 287.270067][ T29] Kernel Offset: disabled [ 287.933511][ T29] Rebooting in 86400 seconds..