./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3975978821 <...> Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. execve("./syz-executor3975978821", ["./syz-executor3975978821"], 0x7ffe3ad3ade0 /* 10 vars */) = 0 brk(NULL) = 0x555560dc4000 brk(0x555560dc4d00) = 0x555560dc4d00 arch_prctl(ARCH_SET_FS, 0x555560dc4380) = 0 set_tid_address(0x555560dc4650) = 5081 set_robust_list(0x555560dc4660, 24) = 0 rseq(0x555560dc4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3975978821", 4096) = 28 getrandom("\x90\x1a\x7f\xa4\x68\xa2\xf2\xd2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555560dc4d00 brk(0x555560de5d00) = 0x555560de5d00 brk(0x555560de6000) = 0x555560de6000 mprotect(0x7f7563880000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555560dc4660, 24 [pid 5081] <... clone resumed>, child_tidptr=0x555560dc4650) = 5082 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5084 attached ./strace-static-x86_64: Process 5083 attached , child_tidptr=0x555560dc4650) = 5083 [pid 5081] <... clone resumed>, child_tidptr=0x555560dc4650) = 5084 [pid 5084] set_robust_list(0x555560dc4660, 24 [pid 5083] set_robust_list(0x555560dc4660, 24 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... set_robust_list resumed>) = 0 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5086 attached ./strace-static-x86_64: Process 5085 attached ) = 0 [pid 5086] set_robust_list(0x555560dc4660, 24 [pid 5084] <... clone resumed>, child_tidptr=0x555560dc4650) = 5086 [pid 5083] setpgid(0, 0 [pid 5081] <... clone resumed>, child_tidptr=0x555560dc4650) = 5085 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] set_robust_list(0x555560dc4660, 24 [pid 5083] <... setpgid resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... set_robust_list resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5087 attached [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... clone resumed>, child_tidptr=0x555560dc4650) = 5087 [pid 5087] set_robust_list(0x555560dc4660, 24 [pid 5086] <... prctl resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5083] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5088 attached [pid 5085] <... clone resumed>, child_tidptr=0x555560dc4650) = 5088 [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached [pid 5088] set_robust_list(0x555560dc4660, 24 [pid 5086] <... setpgid resumed>) = 0 [pid 5083] write(3, "1000", 4executing program [pid 5081] <... clone resumed>, child_tidptr=0x555560dc4650) = 5089 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... write resumed>) = 4 [pid 5083] close(3 [pid 5086] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5083] write(1, "executing program\n", 18) = 18 [pid 5086] write(3, "1000", 4 [pid 5083] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5086] <... write resumed>) = 4 [pid 5089] set_robust_list(0x555560dc4660, 24 [pid 5088] <... set_robust_list resumed>) = 0 [pid 5089] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5090 attached [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] close(3executing program [pid 5083] <... openat resumed>) = 3 [pid 5090] set_robust_list(0x555560dc4660, 24 [pid 5086] <... close resumed>) = 0 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5086] write(1, "executing program\n", 18 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... write resumed>) = 18 [pid 5083] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5090] <... prctl resumed>) = 0 [pid 5088] <... prctl resumed>) = 0 [pid 5087] <... clone resumed>, child_tidptr=0x555560dc4650) = 5090 [pid 5086] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5090] setpgid(0, 0 [pid 5088] setpgid(0, 0./strace-static-x86_64: Process 5091 attached [pid 5090] <... setpgid resumed>) = 0 [pid 5088] <... setpgid resumed>) = 0 [pid 5086] <... openat resumed>) = 3 [pid 5091] set_robust_list(0x555560dc4660, 24) = 0 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] <... openat resumed>) = 3 [pid 5088] <... openat resumed>) = 3 [pid 5091] <... prctl resumed>) = 0 [pid 5091] setpgid(0, 0 [pid 5089] <... clone resumed>, child_tidptr=0x555560dc4650) = 5091 [pid 5091] <... setpgid resumed>) = 0 [pid 5090] write(3, "1000", 4 [pid 5088] write(3, "1000", 4 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5090] <... write resumed>) = 4 executing program [pid 5088] <... write resumed>) = 4 [pid 5091] <... openat resumed>) = 3 [pid 5090] close(3 [pid 5088] close(3 [pid 5090] <... close resumed>) = 0 [pid 5090] write(1, "executing program\n", 18 [pid 5088] <... close resumed>) = 0 [pid 5091] write(3, "1000", 4 [pid 5090] <... write resumed>) = 18 executing program [pid 5088] write(1, "executing program\n", 18 [pid 5091] <... write resumed>) = 4 [pid 5090] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5088] <... write resumed>) = 18 [pid 5091] close(3) = 0 [pid 5090] <... openat resumed>) = 3 executing program [pid 5088] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5091] write(1, "executing program\n", 18 [pid 5090] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5088] <... openat resumed>) = 3 [pid 5091] <... write resumed>) = 18 [pid 5091] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5088] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5091] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5082] kill(-5083, SIGKILL [pid 5084] kill(-5086, SIGKILL [pid 5082] <... kill resumed>) = 0 [pid 5084] <... kill resumed>) = 0 [pid 5084] kill(5086, SIGKILL) = 0 [pid 5082] kill(5083, SIGKILL) = 0 [pid 5085] kill(-5088, SIGKILL) = 0 [pid 5085] kill(5088, SIGKILL) = 0 [pid 5089] kill(-5091, SIGKILL [pid 5087] kill(-5090, SIGKILL [pid 5089] <... kill resumed>) = 0 [pid 5087] <... kill resumed>) = 0 [pid 5089] kill(5091, SIGKILL [pid 5087] kill(5090, SIGKILL [pid 5089] <... kill resumed>) = 0 [pid 5087] <... kill resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5087] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5089] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5087] <... openat resumed>) = 3 [pid 5089] <... openat resumed>) = 3 [pid 5085] <... openat resumed>) = 3 [pid 5087] newfstatat(3, "", [pid 5084] newfstatat(3, "", [pid 5082] <... openat resumed>) = 3 [pid 5089] newfstatat(3, "", [pid 5085] newfstatat(3, "", [pid 5082] newfstatat(3, "", [pid 5089] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5087] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5089] getdents64(3, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, [pid 5089] <... getdents64 resumed>0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5087] <... getdents64 resumed>0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5085] <... getdents64 resumed>0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(3, [pid 5087] getdents64(3, [pid 5085] getdents64(3, [pid 5089] getdents64(3, [pid 5087] <... getdents64 resumed>0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5089] <... getdents64 resumed>0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5089] close(3 [pid 5087] close(3 [pid 5085] close(3 [pid 5089] <... close resumed>) = 0 [pid 5087] <... close resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] <... getdents64 resumed>0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(3, 0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(3, 0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [ 76.865250][ T928] cfg80211: failed to load regulatory.db [pid 5083] <... fallocate resumed>) = ? [pid 5083] +++ killed by SIGKILL +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5083, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4724 /* 47.24 s */} --- [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5107 attached , child_tidptr=0x555560dc4650) = 5107 [pid 5107] set_robust_list(0x555560dc4660, 24) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4executing program ) = 4 [pid 5107] close(3) = 0 [pid 5107] write(1, "executing program\n", 18) = 18 [pid 5107] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5107] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5082] kill(-5107, SIGKILL) = 0 [pid 5082] kill(5107, SIGKILL) = 0 [pid 5082] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(3, 0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5086] <... fallocate resumed>) = ? [pid 5086] +++ killed by SIGKILL +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5086, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4738 /* 47.38 s */} --- [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x555560dc4650) = 5108 [pid 5108] set_robust_list(0x555560dc4660, 24) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4executing program ) = 4 [pid 5108] close(3) = 0 [pid 5108] write(1, "executing program\n", 18) = 18 [pid 5108] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5108] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5084] kill(-5108, SIGKILL) = 0 [pid 5084] kill(5108, SIGKILL) = 0 [pid 5084] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(3, 0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5090] <... fallocate resumed>) = ? [pid 5090] +++ killed by SIGKILL +++ [pid 5087] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5090, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4811 /* 48.11 s */} --- [pid 5087] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5115 attached , child_tidptr=0x555560dc4650) = 5115 [pid 5115] set_robust_list(0x555560dc4660, 24) = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4executing program ) = 4 [pid 5115] close(3) = 0 [pid 5115] write(1, "executing program\n", 18) = 18 [pid 5115] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5115] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 273804165120 [pid 5087] kill(-5115, SIGKILL) = 0 [pid 5087] kill(5115, SIGKILL) = 0 [pid 5087] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5087] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5087] getdents64(3, 0x555560dc56f0 /* 2 entries */, 32768) = 48 [pid 5087] getdents64(3, 0x555560dc56f0 /* 0 entries */, 32768) = 0 [pid 5087] close(3) = 0 [ 286.735234][ T30] INFO: task syz-executor397:5091 blocked for more than 143 seconds. [ 286.743852][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 286.751855][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.760938][ T30] task:syz-executor397 state:D stack:26816 pid:5091 tgid:5091 ppid:5089 flags:0x00004006 [ 286.771556][ T30] Call Trace: [ 286.775218][ T30] [ 286.778172][ T30] __schedule+0x1796/0x49d0 [ 286.782745][ T30] ? __pfx___schedule+0x10/0x10 [ 286.788009][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.793402][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.799453][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.806159][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.811299][ T30] ? schedule+0x90/0x320 [ 286.815591][ T30] schedule+0x14b/0x320 [ 286.819767][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.825618][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.831732][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.838069][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.845207][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.850627][ T30] __down_write_common+0x1af/0x200 [ 286.856172][ T30] ? __pfx___down_write_common+0x10/0x10 [ 286.862197][ T30] blkdev_fallocate+0x233/0x550 [ 286.867119][ T30] vfs_fallocate+0x564/0x6c0 [ 286.871734][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.876812][ T30] do_syscall_64+0xf3/0x230 [ 286.881704][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.886802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.893061][ T30] RIP: 0033:0x7f756380dae9 [ 286.897900][ T30] RSP: 002b:00007ffff169b5f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.906403][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f756380dae9 [ 286.914821][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 286.923177][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.931630][ T30] R10: 0000003fc0000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.940044][ T30] R13: 00007ffff169b818 R14: 00007ffff169b620 R15: 00007ffff169b610 [ 286.948105][ T30] [ 286.951160][ T30] INFO: task syz-executor397:5107 blocked for more than 143 seconds. [ 286.959676][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 286.967731][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.976861][ T30] task:syz-executor397 state:D stack:25104 pid:5107 tgid:5107 ppid:5082 flags:0x00004006 [ 286.987467][ T30] Call Trace: [ 286.991117][ T30] [ 286.994434][ T30] __schedule+0x1796/0x49d0 [ 286.999357][ T30] ? __pfx___schedule+0x10/0x10 [ 287.004238][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.009676][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.015713][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.022407][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 287.028005][ T30] ? schedule+0x90/0x320 [ 287.032629][ T30] schedule+0x14b/0x320 [ 287.037179][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.042991][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 287.049128][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 287.055443][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.062018][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.067115][ T30] __down_write_common+0x1af/0x200 [ 287.072251][ T30] ? __pfx___down_write_common+0x10/0x10 [ 287.078302][ T30] blkdev_fallocate+0x233/0x550 [ 287.083521][ T30] vfs_fallocate+0x564/0x6c0 [ 287.088498][ T30] __x64_sys_fallocate+0xbd/0x110 [ 287.093910][ T30] do_syscall_64+0xf3/0x230 [ 287.098842][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.103885][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.110183][ T30] RIP: 0033:0x7f756380dae9 [ 287.114982][ T30] RSP: 002b:00007ffff169b5f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.123421][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f756380dae9 [ 287.131446][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000003 [ 287.139896][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.148380][ T30] R10: 0000003fc0000000 R11: 0000000000000246 R12: 000000000000e1e7 [ 287.156809][ T30] R13: 00007ffff169b60c R14: 00007ffff169b620 R15: 00007ffff169b610 [ 287.165228][ T30] [ 287.168701][ T30] [ 287.168701][ T30] Showing all locks held in the system: [ 287.176861][ T30] 1 lock held by khungtaskd/30: [ 287.182079][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.192389][ T30] 1 lock held by klogd/4526: [ 287.197035][ T30] 2 locks held by getty/4839: [ 287.201721][ T30] #0: ffff88802ac3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.211550][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.222116][ T30] 1 lock held by syz-executor397/5088: [ 287.227996][ T30] 1 lock held by syz-executor397/5091: [ 287.233831][ T30] #0: ffff88801d49abc8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.244890][ T30] 1 lock held by syz-executor397/5107: [ 287.250361][ T30] #0: ffff88801d49abc8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.261433][ T30] 1 lock held by syz-executor397/5108: [ 287.267301][ T30] #0: ffff88801d49abc8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.278026][ T30] 1 lock held by syz-executor397/5115: [ 287.283823][ T30] #0: ffff88801d49abc8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.294551][ T30] [ 287.296884][ T30] ============================================= [ 287.296884][ T30] [ 287.305737][ T30] NMI backtrace for cpu 1 [ 287.310075][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 287.319956][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.330004][ T30] Call Trace: [ 287.333273][ T30] [ 287.336204][ T30] dump_stack_lvl+0x241/0x360 [ 287.340896][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.346098][ T30] ? __pfx__printk+0x10/0x10 [ 287.350692][ T30] ? vprintk_emit+0x631/0x770 [ 287.355373][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.360410][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.365354][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.370814][ T30] ? _printk+0xd5/0x120 [ 287.374971][ T30] ? __pfx__printk+0x10/0x10 [ 287.379566][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.384412][ T30] ? __pfx__printk+0x10/0x10 [ 287.389000][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.394023][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.400000][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.405984][ T30] watchdog+0xfde/0x1020 [ 287.410416][ T30] ? watchdog+0x1ea/0x1020 [ 287.414845][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.419532][ T30] kthread+0x2f0/0x390 [ 287.423602][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.428273][ T30] ? __pfx_kthread+0x10/0x10 [ 287.432858][ T30] ret_from_fork+0x4b/0x80 [ 287.437280][ T30] ? __pfx_kthread+0x10/0x10 [ 287.441874][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.446659][ T30] [ 287.449875][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.455262][ C0] NMI backtrace for cpu 0 [ 287.455275][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 287.455293][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.455302][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0xba/0x120 [ 287.455327][ C0] Code: 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 c4 a9 6d 7e a9 00 01 ff 00 74 11 a9 00 01 00 00 74 de 41 83 bb 1c 16 00 00 00 <74> d4 41 8b 83 f8 15 00 00 83 f8 03 75 c8 49 8b 8b 00 16 00 00 45 [ 287.455341][ C0] RSP: 0018:ffffc90000157580 EFLAGS: 00000246 [ 287.455357][ C0] RAX: 0000000000000101 RBX: 0000000000000000 RCX: ffff8880176bda00 [ 287.455369][ C0] RDX: 0000000000000007 RSI: ffffffff8e1a1380 RDI: 0000000000000005 [ 287.455381][ C0] RBP: 0000000000000005 R08: 0000000000000005 R09: ffffffff8140f7ae [ 287.455392][ C0] R10: 0000000000000008 R11: ffff8880176bda00 R12: ffffffff8fc4b560 [ 287.455403][ C0] R13: dffffc0000000000 R14: 0000000000000009 R15: 1ffff9200002aed0 [ 287.455415][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 287.455429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.455441][ C0] CR2: 00007f2ad6d11580 CR3: 0000000074cc2000 CR4: 00000000003506f0 [ 287.455456][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.455466][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.455476][ C0] Call Trace: [ 287.455482][ C0] [ 287.455489][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.455508][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.455533][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.455550][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.455583][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.455602][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.455626][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.455651][ C0] ? __sanitizer_cov_trace_switch+0xba/0x120 [ 287.455669][ C0] ? default_do_nmi+0x63/0x160 [ 287.455688][ C0] ? exc_nmi+0x123/0x1f0 [ 287.455705][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.455732][ C0] ? unwind_next_frame+0x7be/0x2a00 [ 287.455756][ C0] ? __sanitizer_cov_trace_switch+0xba/0x120 [ 287.455775][ C0] ? __sanitizer_cov_trace_switch+0xba/0x120 [ 287.455795][ C0] ? __sanitizer_cov_trace_switch+0xba/0x120 [ 287.455814][ C0] [ 287.455819][ C0] [ 287.455826][ C0] unwind_next_frame+0x7be/0x2a00 [ 287.455854][ C0] ? __reset_page_owner+0x75/0x3f0 [ 287.455874][ C0] ? __reset_page_owner+0x75/0x3f0 [ 287.455893][ C0] ? __kernel_text_address+0xd/0x40 [ 287.455915][ C0] ? __reset_page_owner+0x75/0x3f0 [ 287.455933][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.455951][ C0] arch_stack_walk+0x151/0x1b0 [ 287.455979][ C0] ? __reset_page_owner+0x75/0x3f0 [ 287.456000][ C0] stack_trace_save+0x118/0x1d0 [ 287.456018][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 287.456041][ C0] save_stack+0xfb/0x1f0 [ 287.456061][ C0] ? __pfx_save_stack+0x10/0x10 [ 287.456089][ C0] ? page_ext_get+0x20/0x2a0 [ 287.456110][ C0] __reset_page_owner+0x75/0x3f0 [ 287.456135][ C0] free_unref_page+0xd19/0xea0 [ 287.456157][ C0] ? rcu_core+0xa86/0x1830 [ 287.456173][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 287.456197][ C0] rcu_core+0xafd/0x1830 [ 287.456222][ C0] ? __pfx_rcu_core+0x10/0x10 [ 287.456241][ C0] ? rcu_qs+0xf1/0x190 [ 287.456257][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 287.456273][ C0] ? sched_clock_cpu+0x76/0x490 [ 287.456299][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.456318][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.456341][ C0] handle_softirqs+0x2c4/0x970 [ 287.456361][ C0] ? run_ksoftirqd+0xca/0x130 [ 287.456381][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.456403][ C0] run_ksoftirqd+0xca/0x130 [ 287.456421][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.456442][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 287.456460][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 287.456476][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 287.456507][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 287.456529][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.456546][ C0] smpboot_thread_fn+0x544/0xa30 [ 287.456563][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 287.456584][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.456601][ C0] kthread+0x2f0/0x390 [ 287.456621][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.456637][ C0] ? __pfx_kthread+0x10/0x10 [ 287.456657][ C0] ret_from_fork+0x4b/0x80 [ 287.456678][ C0] ? __pfx_kthread+0x10/0x10 [ 287.456698][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.456729][ C0] [ 287.456736][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.473 msecs [ 287.933202][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.940098][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 287.949998][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.960073][ T30] Call Trace: [ 287.963358][ T30] [ 287.966297][ T30] dump_stack_lvl+0x241/0x360 [ 287.970994][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.976200][ T30] ? __pfx__printk+0x10/0x10 [ 287.980773][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.986752][ T30] ? vscnprintf+0x5d/0x90 [ 287.991081][ T30] panic+0x349/0x860 [ 287.994970][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.001114][ T30] ? __pfx_panic+0x10/0x10 [ 288.005520][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 288.010887][ T30] ? __irq_work_queue_local+0x137/0x410 [ 288.016421][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 288.021794][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.027936][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 288.034076][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 288.040225][ T30] watchdog+0x101d/0x1020 [ 288.044549][ T30] ? watchdog+0x1ea/0x1020 [ 288.048956][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.053625][ T30] kthread+0x2f0/0x390 [ 288.057684][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.062350][ T30] ? __pfx_kthread+0x10/0x10 [ 288.066953][ T30] ret_from_fork+0x4b/0x80 [ 288.071359][ T30] ? __pfx_kthread+0x10/0x10 [ 288.075940][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.080705][ T30] [ 288.083932][ T30] Kernel Offset: disabled [ 288.088248][ T30] Rebooting in 86400 seconds..