./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor424360409 <...> Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. execve("./syz-executor424360409", ["./syz-executor424360409"], 0x7ffd880e1a60 /* 10 vars */) = 0 brk(NULL) = 0x555556655000 brk(0x555556655d00) = 0x555556655d00 arch_prctl(ARCH_SET_FS, 0x555556655380) = 0 set_tid_address(0x555556655650) = 5070 set_robust_list(0x555556655660, 24) = 0 rseq(0x555556655ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor424360409", 4096) = 27 getrandom("\x70\xd6\x11\x03\xbd\x2b\xac\xe1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556655d00 brk(0x555556676d00) = 0x555556676d00 brk(0x555556677000) = 0x555556677000 mprotect(0x7f3724dee000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x555556655660, 24 [pid 5070] <... clone resumed>, child_tidptr=0x555556655650) = 5071 [pid 5071] <... set_robust_list resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached ./strace-static-x86_64: Process 5072 attached , child_tidptr=0x555556655650) = 5073 [pid 5071] <... clone resumed>, child_tidptr=0x555556655650) = 5072 [pid 5073] set_robust_list(0x555556655660, 24) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] set_robust_list(0x555556655660, 24./strace-static-x86_64: Process 5075 attached ./strace-static-x86_64: Process 5074 attached ) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555556655650) = 5075 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] set_robust_list(0x555556655660, 24 [pid 5074] set_robust_list(0x555556655660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555556655650) = 5074 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] <... set_robust_list resumed>) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5076 attached [pid 5072] setpgid(0, 0 [pid 5070] <... clone resumed>, child_tidptr=0x555556655650) = 5076 [pid 5076] set_robust_list(0x555556655660, 24 [pid 5074] <... prctl resumed>) = 0 [pid 5072] <... setpgid resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5077 attached [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5078 attached [pid 5077] set_robust_list(0x555556655660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555556655650) = 5077 [pid 5074] <... setpgid resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... clone resumed>, child_tidptr=0x555556655650) = 5078 [pid 5078] set_robust_list(0x555556655660, 24./strace-static-x86_64: Process 5079 attached [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] write(3, "1000", 4 [pid 5077] <... prctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... write resumed>) = 4 [pid 5077] setpgid(0, 0) = 0 [pid 5072] close(3 [pid 5079] set_robust_list(0x555556655660, 24 [pid 5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... clone resumed>, child_tidptr=0x555556655650) = 5079 [pid 5074] write(3, "1000", 4 [pid 5072] <... close resumed>) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5079] <... set_robust_list resumed>) = 0 [pid 5074] <... write resumed>) = 4 [pid 5072] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5080] set_robust_list(0x555556655660, 24 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5077] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] <... prctl resumed>) = 0 [pid 5077] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5070] <... clone resumed>, child_tidptr=0x555556655650) = 5080 [pid 5079] setpgid(0, 0 [pid 5077] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5079] <... setpgid resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5077] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5072] dup(3 [pid 5077] <... close resumed>) = 0 [pid 5074] dup(3 [pid 5072] <... dup resumed>) = 4 [pid 5077] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5074] <... dup resumed>) = 4 [pid 5072] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807./strace-static-x86_64: Process 5081 attached [pid 5079] <... openat resumed>) = 3 [pid 5077] dup(3 [pid 5074] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807./strace-static-x86_64: Process 5082 attached [pid 5081] set_robust_list(0x555556655660, 24 [pid 5080] <... clone resumed>, child_tidptr=0x555556655650) = 5081 [pid 5079] write(3, "1000", 4 [pid 5078] <... clone resumed>, child_tidptr=0x555556655650) = 5082 [pid 5077] <... dup resumed>) = 4 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5082] set_robust_list(0x555556655660, 24 [pid 5079] <... write resumed>) = 4 [pid 5077] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] <... set_robust_list resumed>) = 0 [pid 5079] close(3 [pid 5081] <... prctl resumed>) = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] <... close resumed>) = 0 [pid 5081] setpgid(0, 0 [pid 5082] <... prctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5081] <... setpgid resumed>) = 0 [pid 5082] setpgid(0, 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... setpgid resumed>) = 0 [pid 5079] <... openat resumed>) = 3 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... openat resumed>) = 3 [pid 5082] <... openat resumed>) = 3 [pid 5079] dup(3 [pid 5082] write(3, "1000", 4 [pid 5079] <... dup resumed>) = 4 [pid 5081] write(3, "1000", 4 [pid 5082] <... write resumed>) = 4 [pid 5079] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5081] <... write resumed>) = 4 [pid 5082] close(3 [pid 5081] close(3 [pid 5082] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5082] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5081] <... openat resumed>) = 3 [pid 5081] dup(3) = 4 [pid 5081] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5082] <... openat resumed>) = 3 [pid 5082] dup(3) = 4 [pid 5082] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5071] kill(-5072, SIGKILL) = 0 [pid 5071] kill(5072, SIGKILL) = 0 [pid 5073] kill(-5074, SIGKILL) = 0 [pid 5073] kill(5074, SIGKILL) = 0 [pid 5076] kill(-5079, SIGKILL [pid 5075] kill(-5077, SIGKILL) = 0 [pid 5075] kill(5077, SIGKILL) = 0 [pid 5076] <... kill resumed>) = 0 [pid 5078] kill(-5082, SIGKILL [pid 5076] kill(5079, SIGKILL [pid 5078] <... kill resumed>) = 0 [pid 5076] <... kill resumed>) = 0 [pid 5078] kill(5082, SIGKILL) = 0 [pid 5080] kill(-5081, SIGKILL) = 0 [pid 5080] kill(5081, SIGKILL) = 0 [pid 5078] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] <... openat resumed>) = 3 [pid 5078] newfstatat(3, "", [pid 5076] newfstatat(3, "", [pid 5078] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5078] getdents64(3, 0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5078] close(3 [pid 5076] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5078] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5073] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5075] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5080] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5073] <... getdents64 resumed>0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5080] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5080] newfstatat(3, "", [pid 5075] getdents64(3, [pid 5080] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5075] close(3 [pid 5080] <... getdents64 resumed>0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5080] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5080] close(3) = 0 [ 76.043173][ T8] cfg80211: failed to load regulatory.db [pid 5072] <... fallocate resumed>) = ? [pid 5072] +++ killed by SIGKILL +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5072, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4832 /* 48.32 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556655650) = 5101 ./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x555556655660, 24) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5101] dup(3) = 4 [pid 5101] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5071] kill(-5101, SIGKILL) = 0 [pid 5071] kill(5101, SIGKILL) = 0 [pid 5071] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5074] <... fallocate resumed>) = ? [pid 5074] +++ killed by SIGKILL +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5074, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4835 /* 48.35 s */} --- [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x555556655660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555556655650) = 5102 [pid 5102] <... set_robust_list resumed>) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5102] dup(3) = 4 [pid 5102] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5073] kill(-5102, SIGKILL) = 0 [pid 5073] kill(5102, SIGKILL) = 0 [pid 5073] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5077] <... fallocate resumed>) = ? [pid 5077] +++ killed by SIGKILL +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5077, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4860 /* 48.60 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5109 attached , child_tidptr=0x555556655650) = 5109 [pid 5109] set_robust_list(0x555556655660, 24) = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5109] dup(3) = 4 [pid 5109] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5075] kill(-5109, SIGKILL) = 0 [pid 5075] kill(5109, SIGKILL) = 0 [pid 5075] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555566566f0 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, 0x5555566566f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [ 285.938445][ T29] INFO: task syz-executor424:5082 blocked for more than 143 seconds. [ 285.947143][ T29] Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 285.955032][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.964069][ T29] task:syz-executor424 state:D stack:27456 pid:5082 tgid:5082 ppid:5078 flags:0x00004006 [ 285.974290][ T29] Call Trace: [ 285.977575][ T29] [ 285.981114][ T29] __schedule+0xedb/0x5af0 [ 285.985877][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 285.992153][ T29] ? hlock_class+0x4e/0x130 [ 285.996968][ T29] ? mark_lock+0xb5/0xc50 [ 286.001664][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.007236][ T29] ? schedule+0x1fc/0x270 [ 286.011898][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 286.017548][ T29] ? __down_write_common+0x899/0x1400 [ 286.023013][ T29] schedule+0xe9/0x270 [ 286.027106][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.032639][ T29] __down_write_common+0x948/0x1400 [ 286.038533][ T29] ? aa_file_perm+0x4f2/0x1000 [ 286.043326][ T29] ? up_write+0x510/0x510 [ 286.047671][ T29] ? lock_sync+0x190/0x190 [ 286.052603][ T29] ? preempt_count_sub+0x160/0x160 [ 286.057739][ T29] ? ptrace_notify+0xf4/0x130 [ 286.062466][ T29] blkdev_fallocate+0x1e9/0x450 [ 286.067639][ T29] ? file_to_blk_mode+0x1a0/0x1a0 [ 286.072988][ T29] vfs_fallocate+0x46c/0xe50 [ 286.077889][ T29] __x64_sys_fallocate+0xd5/0x140 [ 286.083252][ T29] do_syscall_64+0x40/0x110 [ 286.088581][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 286.094494][ T29] RIP: 0033:0x7f3724d7bb29 [ 286.098980][ T29] RSP: 002b:00007ffd18b03a58 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.107739][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3724d7bb29 [ 286.116000][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.124334][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.132636][ T29] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 286.140734][ T29] R13: 00007ffd18b03c78 R14: 00007ffd18b03a80 R15: 00007ffd18b03a70 [ 286.152930][ T29] [ 286.155973][ T29] INFO: task syz-executor424:5081 blocked for more than 143 seconds. [ 286.164427][ T29] Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 286.175674][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.184657][ T29] task:syz-executor424 state:D stack:28208 pid:5081 tgid:5081 ppid:5080 flags:0x00004006 [ 286.195148][ T29] Call Trace: [ 286.198724][ T29] [ 286.201938][ T29] __schedule+0xedb/0x5af0 [ 286.206614][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 286.212911][ T29] ? hlock_class+0x4e/0x130 [ 286.217435][ T29] ? mark_lock+0xb5/0xc50 [ 286.221821][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.227136][ T29] ? schedule+0x1fc/0x270 [ 286.231858][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 286.237599][ T29] ? __down_write_common+0x899/0x1400 [ 286.243328][ T29] schedule+0xe9/0x270 [ 286.247705][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.253519][ T29] __down_write_common+0x948/0x1400 [ 286.259062][ T29] ? aa_file_perm+0x4f2/0x1000 [ 286.264144][ T29] ? up_write+0x510/0x510 [ 286.268833][ T29] ? lock_sync+0x190/0x190 [ 286.273283][ T29] ? preempt_count_sub+0x160/0x160 [ 286.278438][ T29] ? ptrace_notify+0xf4/0x130 [ 286.283137][ T29] blkdev_fallocate+0x1e9/0x450 [ 286.288324][ T29] ? file_to_blk_mode+0x1a0/0x1a0 [ 286.293626][ T29] vfs_fallocate+0x46c/0xe50 [ 286.298571][ T29] __x64_sys_fallocate+0xd5/0x140 [ 286.303926][ T29] do_syscall_64+0x40/0x110 [ 286.308479][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 286.314824][ T29] RIP: 0033:0x7f3724d7bb29 [ 286.319546][ T29] RSP: 002b:00007ffd18b03a58 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.328311][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3724d7bb29 [ 286.336564][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.344673][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.352689][ T29] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 286.360924][ T29] R13: 00007ffd18b03c78 R14: 00007ffd18b03a80 R15: 00007ffd18b03a70 [ 286.369235][ T29] [ 286.372290][ T29] INFO: task syz-executor424:5101 blocked for more than 143 seconds. [ 286.380736][ T29] Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 286.388586][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.397587][ T29] task:syz-executor424 state:D stack:26504 pid:5101 tgid:5101 ppid:5071 flags:0x00004006 [ 286.408087][ T29] Call Trace: [ 286.411379][ T29] [ 286.414407][ T29] __schedule+0xedb/0x5af0 [ 286.419353][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 286.425349][ T29] ? hlock_class+0x4e/0x130 [ 286.429881][ T29] ? mark_lock+0xb5/0xc50 [ 286.434483][ T29] ? io_schedule_timeout+0x150/0x150 [ 286.440087][ T29] ? schedule+0x1fc/0x270 [ 286.444687][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 286.450406][ T29] ? __down_write_common+0x899/0x1400 [ 286.456069][ T29] schedule+0xe9/0x270 [ 286.460435][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.466166][ T29] __down_write_common+0x948/0x1400 [ 286.471651][ T29] ? aa_file_perm+0x4f2/0x1000 [ 286.476434][ T29] ? up_write+0x510/0x510 [ 286.480805][ T29] ? lock_sync+0x190/0x190 [ 286.485244][ T29] ? preempt_count_sub+0x160/0x160 [ 286.490657][ T29] ? ptrace_notify+0xf4/0x130 [ 286.495602][ T29] blkdev_fallocate+0x1e9/0x450 [ 286.500752][ T29] ? file_to_blk_mode+0x1a0/0x1a0 [ 286.506053][ T29] vfs_fallocate+0x46c/0xe50 [ 286.510929][ T29] __x64_sys_fallocate+0xd5/0x140 [ 286.516226][ T29] do_syscall_64+0x40/0x110 [ 286.521049][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 286.527235][ T29] RIP: 0033:0x7f3724d7bb29 [ 286.531682][ T29] RSP: 002b:00007ffd18b03a58 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.540122][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3724d7bb29 [ 286.548385][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.556595][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.564884][ T29] R10: 7fffffffffffffff R11: 0000000000000246 R12: 000000000000d7b4 [ 286.573143][ T29] R13: 00007ffd18b03a6c R14: 00007ffd18b03a80 R15: 00007ffd18b03a70 [ 286.581379][ T29] [ 286.584655][ T29] [ 286.584655][ T29] Showing all locks held in the system: [ 286.592720][ T29] 1 lock held by khungtaskd/29: [ 286.597578][ T29] #0: ffffffff8cfab760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 286.607787][ T29] 1 lock held by klogd/4509: [ 286.612554][ T29] 2 locks held by getty/4818: [ 286.617225][ T29] #0: ffff888029eba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.627266][ T29] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 286.637690][ T29] 1 lock held by syz-executor424/5079: [ 286.643435][ T29] 1 lock held by syz-executor424/5082: [ 286.649242][ T29] #0: ffff888148c4ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 286.660162][ T29] 1 lock held by syz-executor424/5081: [ 286.665842][ T29] #0: ffff888148c4ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 286.676782][ T29] 1 lock held by syz-executor424/5101: [ 286.682535][ T29] #0: ffff888148c4ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 286.693200][ T29] 1 lock held by syz-executor424/5102: [ 286.698947][ T29] #0: ffff888148c4ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 286.709650][ T29] 1 lock held by syz-executor424/5109: [ 286.715125][ T29] #0: ffff888148c4ce40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1e9/0x450 [ 286.732571][ T29] [ 286.735119][ T29] ============================================= [ 286.735119][ T29] [ 286.744002][ T29] NMI backtrace for cpu 0 [ 286.748332][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 286.758132][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 286.768173][ T29] Call Trace: [ 286.771438][ T29] [ 286.774356][ T29] dump_stack_lvl+0xd9/0x1b0 [ 286.778950][ T29] nmi_cpu_backtrace+0x277/0x390 [ 286.783877][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 286.789072][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 286.795044][ T29] watchdog+0xf87/0x1210 [ 286.799280][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.805248][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 286.810436][ T29] ? __kthread_parkme+0x14b/0x220 [ 286.815453][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 286.821424][ T29] kthread+0x2c6/0x3a0 [ 286.825482][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.830671][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.836295][ T29] ret_from_fork+0x45/0x80 [ 286.840703][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.846324][ T29] ret_from_fork_asm+0x11/0x20 [ 286.851092][ T29] [ 286.854172][ T29] Sending NMI from CPU 0 to CPUs 1: [ 286.859413][ C1] NMI backtrace for cpu 1 [ 286.859419][ C1] CPU: 1 PID: 1254 Comm: kworker/u4:6 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 286.859432][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 286.859439][ C1] Workqueue: events_unbound toggle_allocation_gate [ 286.859454][ C1] RIP: 0010:__lock_acquire+0x9a/0x3b20 [ 286.859474][ C1] Code: 00 00 00 00 00 fc ff df 48 8d 14 06 c7 02 f1 f1 f1 f1 c7 42 04 00 f3 f3 f3 65 48 8b 14 25 28 00 00 00 48 89 94 24 e8 00 00 00 <31> d2 48 c7 c2 38 6f 19 8f 48 c1 ea 03 0f b6 14 02 48 c7 c0 38 6f [ 286.859484][ C1] RSP: 0018:ffffc90004f777d0 EFLAGS: 00000016 [ 286.859492][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 286.859499][ C1] RDX: 66de9c00c862f400 RSI: 1ffff920009eef0c RDI: ffffffff8ce6d4c8 [ 286.859506][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 286.859512][ C1] R10: ffffffff8f193b57 R11: 0000000000000000 R12: 0000000000000000 [ 286.859519][ C1] R13: ffffffff8ce6d4c8 R14: 0000000000000000 R15: 0000000000000000 [ 286.859529][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 286.859540][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.859547][ C1] CR2: 0000555c47bb7e48 CR3: 000000000cd77000 CR4: 0000000000350ef0 [ 286.859554][ C1] Call Trace: [ 286.859558][ C1] [ 286.859562][ C1] ? show_regs+0x8f/0xa0 [ 286.859576][ C1] ? nmi_cpu_backtrace+0x1d4/0x390 [ 286.859590][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 286.859606][ C1] ? nmi_handle+0x1a6/0x570 [ 286.859618][ C1] ? x86_pmu_event_mapped+0x1c0/0x1c0 [ 286.859635][ C1] ? __lock_acquire+0x9a/0x3b20 [ 286.859651][ C1] ? default_do_nmi+0x6a/0x160 [ 286.859667][ C1] ? exc_nmi+0x186/0x200 [ 286.859681][ C1] ? end_repeat_nmi+0xf/0x2a [ 286.859695][ C1] ? __lock_acquire+0x9a/0x3b20 [ 286.859711][ C1] ? __lock_acquire+0x9a/0x3b20 [ 286.859727][ C1] ? __lock_acquire+0x9a/0x3b20 [ 286.859742][ C1] [ 286.859745][ C1] [ 286.859749][ C1] ? inat_get_opcode_attribute+0xc/0x50 [ 286.859762][ C1] ? insn_get_prefixes+0x67/0x1120 [ 286.859776][ C1] ? kmem_cache_alloc_lru+0x189/0x6f0 [ 286.859790][ C1] ? inat_get_opcode_attribute+0xc/0x50 [ 286.859803][ C1] ? insn_get_prefixes+0x67/0x1120 [ 286.859818][ C1] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 286.859834][ C1] ? insn_get_opcode+0x444/0xa30 [ 286.859849][ C1] lock_acquire+0x1ae/0x520 [ 286.859865][ C1] ? arch_jump_label_transform_queue+0x73/0x110 [ 286.859882][ C1] ? lock_sync+0x190/0x190 [ 286.859898][ C1] ? arch_jump_label_transform_queue+0xbb/0x110 [ 286.859914][ C1] ? preempt_count_sub+0x160/0x160 [ 286.859925][ C1] ? kmem_cache_alloc_lru+0x17a/0x6f0 [ 286.859940][ C1] __mutex_lock+0x175/0x9d0 [ 286.859950][ C1] ? arch_jump_label_transform_queue+0x73/0x110 [ 286.859967][ C1] ? arch_jump_label_transform_queue+0x73/0x110 [ 286.859983][ C1] ? __mutex_unlock_slowpath+0x165/0x650 [ 286.859993][ C1] ? mutex_trylock+0x130/0x130 [ 286.860002][ C1] ? bit_wait_timeout+0x160/0x160 [ 286.860020][ C1] ? kmem_cache_alloc_lru+0x17a/0x6f0 [ 286.860035][ C1] ? arch_jump_label_transform_queue+0x73/0x110 [ 286.860051][ C1] arch_jump_label_transform_queue+0x73/0x110 [ 286.860068][ C1] __jump_label_update+0x125/0x420 [ 286.860085][ C1] jump_label_update+0x1d7/0x400 [ 286.860099][ C1] static_key_disable_cpuslocked+0x154/0x1c0 [ 286.860114][ C1] static_key_disable+0x1a/0x20 [ 286.860127][ C1] toggle_allocation_gate+0x13f/0x250 [ 286.860140][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 286.860154][ C1] process_one_work+0x886/0x15d0 [ 286.860171][ C1] ? lock_sync+0x190/0x190 [ 286.860186][ C1] ? workqueue_congested+0x300/0x300 [ 286.860202][ C1] ? assign_work+0x1a0/0x250 [ 286.860216][ C1] worker_thread+0x8b9/0x1290 [ 286.860233][ C1] ? process_one_work+0x15d0/0x15d0 [ 286.860247][ C1] kthread+0x2c6/0x3a0 [ 286.860265][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.860277][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.860291][ C1] ret_from_fork+0x45/0x80 [ 286.860304][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.860317][ C1] ret_from_fork_asm+0x11/0x20 [ 286.860335][ C1] [ 286.860467][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.273112][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0 [ 287.282891][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 287.292920][ T29] Call Trace: [ 287.296181][ T29] [ 287.299095][ T29] dump_stack_lvl+0xd9/0x1b0 [ 287.303676][ T29] panic+0x6dc/0x790 [ 287.307554][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 287.312647][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.318022][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.323733][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.329089][ T29] ? watchdog+0xd3e/0x1210 [ 287.333580][ T29] ? watchdog+0xd31/0x1210 [ 287.337977][ T29] watchdog+0xd4f/0x1210 [ 287.342202][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.348162][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 287.353424][ T29] ? __kthread_parkme+0x14b/0x220 [ 287.358515][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.364475][ T29] kthread+0x2c6/0x3a0 [ 287.368525][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.373701][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.379321][ T29] ret_from_fork+0x45/0x80 [ 287.383753][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 287.389381][ T29] ret_from_fork_asm+0x11/0x20 [ 287.394139][ T29] [ 287.397428][ T29] Kernel Offset: disabled [ 287.401741][ T29] Rebooting in 86400 seconds..