./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3079909142 <...> Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. execve("./syz-executor3079909142", ["./syz-executor3079909142"], 0x7ffc36759a80 /* 10 vars */) = 0 brk(NULL) = 0x555571ea5000 brk(0x555571ea5d00) = 0x555571ea5d00 arch_prctl(ARCH_SET_FS, 0x555571ea5380) = 0 set_tid_address(0x555571ea5650) = 5076 set_robust_list(0x555571ea5660, 24) = 0 rseq(0x555571ea5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3079909142", 4096) = 28 getrandom("\xca\xcc\x82\xe6\x3b\x27\xc6\x37", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571ea5d00 brk(0x555571ec6d00) = 0x555571ec6d00 brk(0x555571ec7000) = 0x555571ec7000 mprotect(0x7f2dba194000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5077 attached , child_tidptr=0x555571ea5650) = 5077 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5077] set_robust_list(0x555571ea5660, 24) = 0 [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached [pid 5076] <... clone resumed>, child_tidptr=0x555571ea5650) = 5078 [pid 5078] set_robust_list(0x555571ea5660, 24./strace-static-x86_64: Process 5079 attached [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] set_robust_list(0x555571ea5660, 24 [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... clone resumed>, child_tidptr=0x555571ea5650) = 5079 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached [pid 5076] <... clone resumed>, child_tidptr=0x555571ea5650) = 5080 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5080] set_robust_list(0x555571ea5660, 24 [pid 5079] <... prctl resumed>) = 0 [pid 5080] <... set_robust_list resumed>) = 0 [pid 5079] setpgid(0, 0./strace-static-x86_64: Process 5082 attached ./strace-static-x86_64: Process 5081 attached [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... clone resumed>, child_tidptr=0x555571ea5650) = 5082 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] set_robust_list(0x555571ea5660, 24 [pid 5081] set_robust_list(0x555571ea5660, 24 [pid 5079] <... setpgid resumed>) = 0 [pid 5078] <... clone resumed>, child_tidptr=0x555571ea5650) = 5081 ./strace-static-x86_64: Process 5084 attached ./strace-static-x86_64: Process 5083 attached [pid 5082] <... set_robust_list resumed>) = 0 [pid 5081] <... set_robust_list resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... clone resumed>, child_tidptr=0x555571ea5650) = 5083 [pid 5084] set_robust_list(0x555571ea5660, 24 [pid 5083] set_robust_list(0x555571ea5660, 24 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5080] <... clone resumed>, child_tidptr=0x555571ea5650) = 5084 [pid 5079] <... openat resumed>) = 3 [pid 5084] <... set_robust_list resumed>) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] write(3, "1000", 4./strace-static-x86_64: Process 5085 attached [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... prctl resumed>) = 0 [pid 5079] <... write resumed>) = 4 ./strace-static-x86_64: Process 5086 attached [pid 5085] set_robust_list(0x555571ea5660, 24 [pid 5084] <... prctl resumed>) = 0 [pid 5081] setpgid(0, 0 [pid 5086] set_robust_list(0x555571ea5660, 24 [pid 5085] <... set_robust_list resumed>) = 0 [pid 5084] setpgid(0, 0 [pid 5083] <... clone resumed>, child_tidptr=0x555571ea5650) = 5086 [pid 5082] <... clone resumed>, child_tidptr=0x555571ea5650) = 5085 [pid 5081] <... setpgid resumed>) = 0 [pid 5079] close(3 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... setpgid resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5079] <... close resumed>) = 0 [pid 5085] <... prctl resumed>) = 0 [pid 5079] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5086] <... prctl resumed>) = 0 [pid 5086] setpgid(0, 0) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5085] setpgid(0, 0 [pid 5084] write(3, "1000", 4 [pid 5079] <... openat resumed>) = 3 [pid 5086] write(3, "1000", 4 [pid 5085] <... setpgid resumed>) = 0 [pid 5084] <... write resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5086] <... write resumed>) = 4 [pid 5084] close(3 [pid 5086] close(3 [pid 5084] <... close resumed>) = 0 [pid 5081] write(3, "1000", 4 [pid 5086] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5086] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... write resumed>) = 4 [pid 5079] dup(3 [pid 5086] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5081] close(3 [pid 5079] <... dup resumed>) = 4 [pid 5086] dup(3 [pid 5085] <... openat resumed>) = 3 [pid 5084] dup(3 [pid 5079] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5081] <... close resumed>) = 0 [pid 5086] <... dup resumed>) = 4 [pid 5086] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5081] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5085] write(3, "1000", 4 [pid 5084] <... dup resumed>) = 4 [pid 5085] <... write resumed>) = 4 [pid 5084] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5081] <... openat resumed>) = 3 [pid 5085] close(3) = 0 [pid 5081] dup(3) = 4 [pid 5085] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5081] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5085] <... openat resumed>) = 3 [pid 5085] dup(3) = 4 [pid 5085] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5077] kill(-5079, SIGKILL) = 0 [pid 5077] kill(5079, SIGKILL) = 0 [pid 5078] kill(-5081, SIGKILL) = 0 [pid 5078] kill(5081, SIGKILL) = 0 [pid 5080] kill(-5084, SIGKILL) = 0 [pid 5080] kill(5084, SIGKILL) = 0 [pid 5083] kill(-5086, SIGKILL [pid 5082] kill(-5085, SIGKILL [pid 5083] <... kill resumed>) = 0 [pid 5082] <... kill resumed>) = 0 [pid 5083] kill(5086, SIGKILL [pid 5082] kill(5085, SIGKILL [pid 5083] <... kill resumed>) = 0 [pid 5082] <... kill resumed>) = 0 [pid 5078] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5078] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5078] getdents64(3, 0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5078] getdents64(3, 0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5078] close(3) = 0 [pid 5082] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] newfstatat(3, "", [pid 5077] <... openat resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5080] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5077] newfstatat(3, "", [pid 5082] getdents64(3, [pid 5083] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5080] <... openat resumed>) = 3 [pid 5077] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5080] newfstatat(3, "", [pid 5077] getdents64(3, [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5080] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5077] <... getdents64 resumed>0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(3, [pid 5082] <... getdents64 resumed>0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, [pid 5077] getdents64(3, [pid 5082] close(3) = 0 [pid 5077] <... getdents64 resumed>0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5077] close(3 [pid 5083] getdents64(3, [pid 5080] <... getdents64 resumed>0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5077] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5080] getdents64(3, 0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5080] close(3) = 0 [pid 5083] <... close resumed>) = 0 [ 87.264153][ T926] cfg80211: failed to load regulatory.db [pid 5079] <... fallocate resumed>) = ? [pid 5079] +++ killed by SIGKILL +++ [pid 5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5079, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=6846 /* 68.46 s */} --- [pid 5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x555571ea5660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x555571ea5650) = 5101 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 [pid 5101] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5101] dup(3) = 4 [pid 5101] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5077] kill(-5101, SIGKILL) = 0 [pid 5077] kill(5101, SIGKILL) = 0 [pid 5077] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5077] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5077] getdents64(3, 0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5077] getdents64(3, 0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5077] close(3) = 0 [pid 5086] <... fallocate resumed>) = ? [pid 5086] +++ killed by SIGKILL +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5086, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=6870 /* 68.70 s */} --- [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x555571ea5650) = 5108 [pid 5108] set_robust_list(0x555571ea5660, 24) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5108] dup(3) = 4 [pid 5108] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 9223372036854775807 [pid 5083] kill(-5108, SIGKILL) = 0 [pid 5083] kill(5108, SIGKILL) = 0 [pid 5083] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x555571ea66f0 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(3, 0x555571ea66f0 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [ 286.928613][ T29] INFO: task syz-executor307:5081 blocked for more than 143 seconds. [ 286.936814][ T29] Not tainted 6.9.0-rc7-syzkaller-00136-gf4345f05c0df #0 [ 286.944792][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.953538][ T29] task:syz-executor307 state:D stack:26800 pid:5081 tgid:5081 ppid:5078 flags:0x00004006 [ 286.964207][ T29] Call Trace: [ 286.967898][ T29] [ 286.971270][ T29] __schedule+0x1796/0x4a00 [ 286.976388][ T29] ? __pfx___schedule+0x10/0x10 [ 286.981792][ T29] ? __pfx_lock_release+0x10/0x10 [ 286.987323][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.993409][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.999868][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 287.005063][ T29] ? schedule+0x90/0x320 [ 287.009435][ T29] schedule+0x14b/0x320 [ 287.013634][ T29] schedule_preempt_disabled+0x13/0x30 [ 287.019575][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 287.025725][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 287.032089][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.038777][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 287.044235][ T29] __down_write_common+0x1af/0x200 [ 287.049773][ T29] ? __pfx___down_write_common+0x10/0x10 [ 287.055840][ T29] blkdev_fallocate+0x233/0x550 [ 287.061214][ T29] vfs_fallocate+0x564/0x6c0 [ 287.065881][ T29] __x64_sys_fallocate+0xbd/0x110 [ 287.071028][ T29] do_syscall_64+0xf5/0x240 [ 287.075695][ T29] ? clear_bhb_loop+0x35/0x90 [ 287.080549][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.086487][ T29] RIP: 0033:0x7f2dba121b29 [ 287.090971][ T29] RSP: 002b:00007ffdf0f77518 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.099895][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2dba121b29 [ 287.108320][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.116786][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.125275][ T29] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 287.133727][ T29] R13: 00007ffdf0f77738 R14: 00007ffdf0f77540 R15: 00007ffdf0f77530 [ 287.142178][ T29] [ 287.145664][ T29] INFO: task syz-executor307:5085 blocked for more than 143 seconds. [ 287.154193][ T29] Not tainted 6.9.0-rc7-syzkaller-00136-gf4345f05c0df #0 [ 287.161807][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.170599][ T29] task:syz-executor307 state:D stack:25168 pid:5085 tgid:5085 ppid:5082 flags:0x00004006 [ 287.180890][ T29] Call Trace: [ 287.184189][ T29] [ 287.187158][ T29] __schedule+0x1796/0x4a00 [ 287.192165][ T29] ? __pfx___schedule+0x10/0x10 [ 287.197452][ T29] ? __pfx_lock_release+0x10/0x10 [ 287.202945][ T29] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.209441][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.216200][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 287.221796][ T29] ? schedule+0x90/0x320 [ 287.226500][ T29] schedule+0x14b/0x320 [ 287.231157][ T29] schedule_preempt_disabled+0x13/0x30 [ 287.236663][ T29] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 287.242463][ T29] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 287.248417][ T29] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.255139][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 287.260652][ T29] __down_write_common+0x1af/0x200 [ 287.266227][ T29] ? __pfx___down_write_common+0x10/0x10 [ 287.272392][ T29] blkdev_fallocate+0x233/0x550 [ 287.277655][ T29] vfs_fallocate+0x564/0x6c0 [ 287.282706][ T29] __x64_sys_fallocate+0xbd/0x110 [ 287.287772][ T29] do_syscall_64+0xf5/0x240 [ 287.292811][ T29] ? clear_bhb_loop+0x35/0x90 [ 287.297933][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.303907][ T29] RIP: 0033:0x7f2dba121b29 [ 287.308353][ T29] RSP: 002b:00007ffdf0f77518 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.317272][ T29] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2dba121b29 [ 287.325739][ T29] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.334317][ T29] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.342755][ T29] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 287.351242][ T29] R13: 00007ffdf0f77738 R14: 00007ffdf0f77540 R15: 00007ffdf0f77530 [ 287.359693][ T29] [ 287.362810][ T29] [ 287.362810][ T29] Showing all locks held in the system: [ 287.371005][ T29] 1 lock held by khungtaskd/29: [ 287.375886][ T29] #0: ffffffff8e334da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.386365][ T29] 3 locks held by klogd/4516: [ 287.391249][ T29] 2 locks held by getty/4831: [ 287.395950][ T29] #0: ffff88802f0b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.405981][ T29] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.416216][ T29] 1 lock held by syz-executor307/5081: [ 287.421798][ T29] #0: ffff88801d5459c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.432544][ T29] 1 lock held by syz-executor307/5084: [ 287.438034][ T29] #0: ffff88801d5459c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.449171][ T29] 1 lock held by syz-executor307/5085: [ 287.455022][ T29] #0: ffff88801d5459c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.466209][ T29] 1 lock held by syz-executor307/5101: [ 287.471807][ T29] #0: ffff88801d5459c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.482541][ T29] 1 lock held by syz-executor307/5108: [ 287.488425][ T29] #0: ffff88801d5459c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.499765][ T29] [ 287.502121][ T29] ============================================= [ 287.502121][ T29] [ 287.510627][ T29] NMI backtrace for cpu 1 [ 287.514986][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00136-gf4345f05c0df #0 [ 287.524821][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.534908][ T29] Call Trace: [ 287.538214][ T29] [ 287.541169][ T29] dump_stack_lvl+0x241/0x360 [ 287.545896][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.551141][ T29] ? __pfx__printk+0x10/0x10 [ 287.555834][ T29] ? vprintk_emit+0x631/0x770 [ 287.560539][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 287.565597][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.570603][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.576087][ T29] ? _printk+0xd5/0x120 [ 287.580283][ T29] ? __pfx__printk+0x10/0x10 [ 287.584903][ T29] ? __wake_up_klogd+0xcc/0x110 [ 287.589798][ T29] ? __pfx__printk+0x10/0x10 [ 287.594415][ T29] ? __rcu_read_unlock+0xa1/0x110 [ 287.599484][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.605548][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.611584][ T29] watchdog+0xfde/0x1020 [ 287.615916][ T29] ? watchdog+0x1ea/0x1020 [ 287.620371][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.625115][ T29] kthread+0x2f0/0x390 [ 287.629229][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.633925][ T29] ? __pfx_kthread+0x10/0x10 [ 287.638544][ T29] ret_from_fork+0x4b/0x80 [ 287.642993][ T29] ? __pfx_kthread+0x10/0x10 [ 287.647593][ T29] ret_from_fork_asm+0x1a/0x30 [ 287.652395][ T29] [ 287.655544][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.660816][ C0] NMI backtrace for cpu 0 [ 287.660828][ C0] CPU: 0 PID: 1056 Comm: kworker/0:2 Not tainted 6.9.0-rc7-syzkaller-00136-gf4345f05c0df #0 [ 287.660846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.660857][ C0] Workqueue: events_long defense_work_handler [ 287.660972][ C0] RIP: 0010:__lock_acquire+0x37e/0x1fd0 [ 287.660993][ C0] Code: d8 48 c1 e8 03 80 3c 30 00 74 17 48 89 df e8 c9 d6 84 00 4c 8b 44 24 08 48 be 00 00 00 00 00 fc ff df 4c 89 23 49 8d 5c e8 18 <48> 89 d8 48 c1 e8 03 48 89 44 24 78 80 3c 30 00 74 17 48 89 df e8 [ 287.661007][ C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000046 [ 287.661021][ C0] RAX: 1ffff1100448616c RBX: ffff888022430b68 RCX: ffffffff946f6603 [ 287.661035][ C0] RDX: 0000000000000003 RSI: dffffc0000000000 RDI: 0000000000000001 [ 287.661046][ C0] RBP: 000000000000000f R08: ffff888022430ad8 R09: 0000000000000001 [ 287.661057][ C0] R10: dffffc0000000000 R11: fffffbfff1f4f9b6 R12: ffffffff948cbca0 [ 287.661069][ C0] R13: 0000000000000001 R14: 000000000000000f R15: 0000000000000000 [ 287.661080][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 287.661094][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.661106][ C0] CR2: 0000555571eae6f8 CR3: 000000000e134000 CR4: 00000000003506f0 [ 287.661120][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.661130][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.661141][ C0] Call Trace: [ 287.661147][ C0] [ 287.661154][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.661174][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.661193][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.661221][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.661255][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.661277][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.661294][ C0] ? __lock_acquire+0x37e/0x1fd0 [ 287.661310][ C0] ? default_do_nmi+0x63/0x160 [ 287.661329][ C0] ? exc_nmi+0x123/0x1f0 [ 287.661346][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.661371][ C0] ? __lock_acquire+0x37e/0x1fd0 [ 287.661388][ C0] ? __lock_acquire+0x37e/0x1fd0 [ 287.661405][ C0] ? __lock_acquire+0x37e/0x1fd0 [ 287.661421][ C0] [ 287.661426][ C0] [ 287.661439][ C0] lock_acquire+0x1ed/0x550 [ 287.661455][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 287.661502][ C0] ? __kernel_text_address+0xd/0x40 [ 287.661524][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 287.661549][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.661565][ C0] ? mark_lock+0x9a/0x350 [ 287.661584][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 287.661606][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 287.661630][ C0] ? debug_check_no_obj_freed+0x234/0x580 [ 287.661645][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 287.661673][ C0] debug_check_no_obj_freed+0x234/0x580 [ 287.661694][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 287.661714][ C0] ? page_ext_get+0x1d6/0x2a0 [ 287.661740][ C0] free_unref_page_prepare+0x322/0xaa0 [ 287.661778][ C0] ? rcu_core+0xa86/0x1830 [ 287.661798][ C0] free_unref_page+0x37/0x3f0 [ 287.661821][ C0] ? rcu_core+0xa86/0x1830 [ 287.661835][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 287.661857][ C0] rcu_core+0xafd/0x1830 [ 287.661879][ C0] ? __pfx_rcu_core+0x10/0x10 [ 287.661895][ C0] ? rebalance_domains+0x949/0xac0 [ 287.661915][ C0] ? rebalance_domains+0x1b9/0xac0 [ 287.661931][ C0] ? __pfx_rebalance_domains+0x10/0x10 [ 287.661951][ C0] handle_softirqs+0x2d6/0x990 [ 287.661972][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.661991][ C0] ? do_softirq+0x11b/0x1e0 [ 287.662009][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.662029][ C0] do_softirq+0x11b/0x1e0 [ 287.662044][ C0] [ 287.662049][ C0] [ 287.662055][ C0] ? __pfx_do_softirq+0x10/0x10 [ 287.662071][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 287.662087][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.662103][ C0] ? rcu_is_watching+0x15/0xb0 [ 287.662122][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 287.662139][ C0] ? update_defense_level+0x124/0xd40 [ 287.662159][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.662175][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.662202][ C0] update_defense_level+0x8fd/0xd40 [ 287.662224][ C0] ? update_defense_level+0x124/0xd40 [ 287.662244][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 287.662268][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.662288][ C0] ? process_scheduled_works+0x91b/0x17c0 [ 287.662305][ C0] defense_work_handler+0x22/0xd0 [ 287.662325][ C0] process_scheduled_works+0xa10/0x17c0 [ 287.662354][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.662375][ C0] ? assign_work+0x364/0x3d0 [ 287.662392][ C0] worker_thread+0x86d/0xd70 [ 287.662413][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.662439][ C0] ? __kthread_parkme+0x169/0x1d0 [ 287.662458][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.662475][ C0] kthread+0x2f0/0x390 [ 287.662495][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.662511][ C0] ? __pfx_kthread+0x10/0x10 [ 287.662531][ C0] ret_from_fork+0x4b/0x80 [ 287.662555][ C0] ? __pfx_kthread+0x10/0x10 [ 287.662574][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.662613][ C0] [ 287.662619][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.803 msecs [ 287.724417][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.724437][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc7-syzkaller-00136-gf4345f05c0df #0 [ 287.724459][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.724471][ T29] Call Trace: [ 287.724480][ T29] [ 287.724490][ T29] dump_stack_lvl+0x241/0x360 [ 287.724530][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.724561][ T29] ? __pfx__printk+0x10/0x10 [ 287.724604][ T29] ? vscnprintf+0x5d/0x90 [ 287.724628][ T29] panic+0x349/0x860 [ 287.724658][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.724684][ T29] ? __pfx_panic+0x10/0x10 [ 287.724709][ T29] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.724740][ T29] ? __irq_work_queue_local+0x137/0x410 [ 287.724792][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 287.724814][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.724837][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.724863][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.724889][ T29] watchdog+0x101d/0x1020 [ 287.724912][ T29] ? watchdog+0x1ea/0x1020 [ 287.724938][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.724957][ T29] kthread+0x2f0/0x390 [ 287.724982][ T29] ? __pfx_watchdog+0x10/0x10 [ 287.725017][ T29] ? __pfx_kthread+0x10/0x10 [ 287.725045][ T29] ret_from_fork+0x4b/0x80 [ 287.725076][ T29] ? __pfx_kthread+0x10/0x10 [ 287.725104][ T29] ret_from_fork_asm+0x1a/0x30 [ 287.725149][ T29] [ 287.730642][ T29] Kernel Offset: disabled [ 288.330600][ T29] Rebooting in 86400 seconds..