Extracting prog: 6m9.489791285s
Minimizing prog: 1h19m22.010882846s
Simplifying prog options: 0s
Extracting C: 4m5.590479591s
Simplifying C: 1h3m30.79849794s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD-prlimit64-getpid-sched_setscheduler-write$binfmt_elf64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)

program did not crash
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD-prlimit64-getpid-sched_setscheduler-write$binfmt_elf64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)

program crashed: INFO: task hung in blkdev_fallocate
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD-prlimit64-getpid-sched_setscheduler
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD-prlimit64-getpid
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD-prlimit64
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp-ioctl$UI_BEGIN_FF_UPLOAD
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000300)={0x5, 0xffff8000, {0x57, 0x0, 0xd8c, {0x97d9}, {0x2, 0xd35}, @ramp={0x0, 0x3fcc, {0x1, 0x1c, 0x51f, 0xffff}}}, {0x57, 0xab7d, 0xfffc, {0x9, 0xfe1b}, {0xa39, 0x7}, @const={0x8, {0x6, 0x9, 0x3, 0x3}}}})

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-socket$inet_tcp
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER-setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet-setsockopt$SO_ATTACH_FILTER
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-socket$packet
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
socket$packet(0x11, 0x3, 0x300)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate-sendmsg$IPSET_CMD_CREATE
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4000000)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{0x0}], 0x1)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-writev
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{0x0}], 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-socket$netlink-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-connect$l2tp-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-dup-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-openat$nullb-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0x100000061200)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-add_key$keyring-dup-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = dup(0xffffffffffffffff)
fallocate(r0, 0x11, 0x0, 0x100000061200)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-ptrace$peeksig-openat$nullb-dup-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-openat$nullb-dup-fallocate
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
simplifying C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
program crashed: INFO: task hung in blkdev_fallocate
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
validation run: crashed=true
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nullb-dup-fallocate
detailed listing:
executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0)
r1 = dup(r0)
fallocate(r1, 0x11, 0x0, 0x100000061200)

program crashed: INFO: task hung in blkdev_fallocate
validation run: crashed=true
reproducing took 2h43m4.903350761s
repro crashed as (corrupted=false):
INFO: task syz.2.19:4577 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19        state:D stack:0     pid:4577  ppid:4469   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.6.23:4636 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.23        state:D stack:0     pid:4636  ppid:4583   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.5.22:4637 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.22        state:D stack:0     pid:4637  ppid:4580   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.7.24:4724 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.24        state:D stack:0     pid:4724  ppid:4640   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.8.25:4725 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.25        state:D stack:0     pid:4725  ppid:4642   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.9.26:4726 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.26        state:D stack:0     pid:4726  ppid:4646   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: 
ffff800015227d70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffff800015228590 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: ffff800015227400 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
2 locks held by kworker/u4:2/39:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff80001cd17c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
2 locks held by getty/4079:
 #0: ffff0000d6386098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80002084e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c drivers/tty/n_tty.c:2198
3 locks held by kworker/1:3/4369:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800020db7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff000118a0c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:3/4396:
 #0: ffff0000d5d3c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800020eb7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/1:16/4446:
 #0: ffff0000d5d3c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff8000212b7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/1:17/4447:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff8000212c7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff0000dac25240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:6/4454:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800021337c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff000116f13240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:7/4455:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800021347c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff00010a867240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
2 locks held by kworker/u4:7/4554:
2 locks held by syz.4.21/4576:
1 lock held by syz.2.19/4577:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.23/4636:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.22/4637:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.24/4724:
 #0: 
ffff0000c5108738
 (
&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.25/4725:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.26/4726:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.28/4764:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.27/4765:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.29/4846:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.30/4869:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.31/4892:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.32/4898:
 #0: 
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.33/4901:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.34/4978:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.35/4989:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.38/5026:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.37/5027:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.36/5028:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.39/5113:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.42/5144:
 #0: 
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.40/5145:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.43/5149:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.41/5157:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.44/5209:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.47/5284:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.45/5289:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.48/5290:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.46/5291:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.49/5312:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.50/5425:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.53/5430:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.52/5431:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.51/5432:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.54/5449:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz-executor/5475:
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 net/core/rtnetlink.c:6147
6 locks held by syz-executor/5479:
1 lock held by syz-executor/5501:
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 net/core/rtnetlink.c:6147
1 lock held by syz.1.55/5513:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.56/5521:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712

=============================================


final repro crashed as (corrupted=false):
INFO: task syz.2.19:4577 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.19        state:D stack:0     pid:4577  ppid:4469   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.6.23:4636 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.6.23        state:D stack:0     pid:4636  ppid:4583   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.5.22:4637 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.5.22        state:D stack:0     pid:4637  ppid:4580   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.7.24:4724 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.7.24        state:D stack:0     pid:4724  ppid:4640   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.8.25:4725 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.8.25        state:D stack:0     pid:4725  ppid:4642   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
INFO: task syz.9.26:4726 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.9.26        state:D stack:0     pid:4726  ppid:4646   flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x568 arch/arm64/kernel/process.c:555
 context_switch kernel/sched/core.c:5244 [inline]
 __schedule+0xddc/0x1b18 kernel/sched/core.c:6561
 schedule+0xc4/0x170 kernel/sched/core.c:6637
 rwsem_down_write_slowpath+0xb74/0x125c kernel/locking/rwsem.c:1189
 __down_write_common kernel/locking/rwsem.c:1314 [inline]
 __down_write kernel/locking/rwsem.c:1323 [inline]
 down_write+0x84/0x88 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
 vfs_fallocate+0x4a4/0x5f4 fs/open.c:323
 ksys_fallocate fs/open.c:346 [inline]
 __do_sys_fallocate fs/open.c:354 [inline]
 __se_sys_fallocate fs/open.c:352 [inline]
 __arm64_sys_fallocate+0xc0/0x110 fs/open.c:352
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x138 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: 
ffff800015227d70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffff800015228590 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/28:
 #0: ffff800015227400 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:349
2 locks held by kworker/u4:2/39:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff80001cd17c20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
2 locks held by getty/4079:
 #0: ffff0000d6386098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80002084e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c drivers/tty/n_tty.c:2198
3 locks held by kworker/1:3/4369:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800020db7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff000118a0c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:3/4396:
 #0: ffff0000d5d3c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800020eb7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/1:16/4446:
 #0: ffff0000d5d3c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff8000212b7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:74
3 locks held by kworker/1:17/4447:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff8000212c7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff0000dac25240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:6/4454:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800021337c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff000116f13240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
3 locks held by kworker/0:7/4455:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 kernel/workqueue.c:2265
 #1: ffff800021347c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 kernel/workqueue.c:2267
 #2: ffff00010a867240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x263c drivers/net/netdevsim/fib.c:1491
2 locks held by kworker/u4:7/4554:
2 locks held by syz.4.21/4576:
1 lock held by syz.2.19/4577:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.23/4636:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.22/4637:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.24/4724:
 #0: 
ffff0000c5108738
 (
&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.25/4725:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.26/4726:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.28/4764:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.27/4765:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.29/4846:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.30/4869:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.31/4892:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.32/4898:
 #0: 
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.33/4901:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.34/4978:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.35/4989:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.38/5026:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.37/5027:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.36/5028:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.39/5113:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.42/5144:
 #0: 
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.40/5145:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.43/5149:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.41/5157:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.44/5209:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.1.47/5284:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.8.45/5289:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.48/5290:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.9.46/5291:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.0.49/5312:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.2.50/5425:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.5.53/5430:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.4.52/5431:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.6.51/5432:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.7.54/5449:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz-executor/5475:
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 net/core/rtnetlink.c:6147
6 locks held by syz-executor/5479:
1 lock held by syz-executor/5501:
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:74 [inline]
 #0: ffff8000176bb748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 net/core/rtnetlink.c:6147
1 lock held by syz.1.55/5513:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712
1 lock held by syz.3.56/5521:
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff0000c5108738 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: blkdev_fallocate+0x1b8/0x3fc block/fops.c:712

=============================================