Extracting prog: 3m44.676849996s
Minimizing prog: 1h10m17.468961605s
Simplifying prog options: 0s
Extracting C: 2m44.657746543s
Simplifying C: 16m6.625577532s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program crashed: INFO: task hung in blk_freeze_queue
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
write(0xffffffffffffffff, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, 0x0, 0x0)
program did not crash
testing program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400), 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=5m31.012436716s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
simplifying C reproducer
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing compiled C program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
program crashed: INFO: task hung in blk_freeze_queue
testing program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program crashed: INFO: task hung in blk_freeze_queue
validation run: crashed=true
testing program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program crashed: INFO: task hung in blk_freeze_queue
validation run: crashed=true
testing program (duration=5m31.012436716s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount-syz_open_dev$loop-openat-ioctl$LOOP_SET_FD-write
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/block/loop0/queue/scheduler\x00', 0x42, 0x1ff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
write(r0, &(0x7f0000001400)='\x00'/4096, 0x1000)
program crashed: INFO: task hung in blk_freeze_queue
validation run: crashed=true
reproducing took 1h41m10.799206763s
repro crashed as (corrupted=false):
INFO: task kworker/u8:2:44 blocked for more than 122 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2 state:D stack:0 pid:44 tgid:44 ppid:2 flags:0x00004000
Workqueue: loop0 loop_workfn
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
blk_mq_freeze_queue_wait+0xf3/0x180 block/blk-mq.c:210
blk_freeze_queue+0xc7/0x100 block/blk-mq.c:237
blk_mq_freeze_queue+0x19/0x30 block/blk-mq.c:246
queue_attr_store+0x2c9/0x3d0 block/blk-sysfs.c:703
sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
lo_rw_aio+0xd36/0x1020 drivers/block/loop.c:-1
do_req_filebacked drivers/block/loop.c:447 [inline]
loop_handle_cmd drivers/block/loop.c:1900 [inline]
loop_process_work+0x589/0x12c0 drivers/block/loop.c:1935
loop_workfn+0x4e/0x70 drivers/block/loop.c:1959
process_one_work kernel/workqueue.c:3273 [inline]
process_scheduled_works+0x7f4/0x1060 kernel/workqueue.c:3354
worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task syz.2.17:382 blocked for more than 123 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.17 state:D stack:0 pid:382 tgid:382 ppid:378 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
io_schedule+0x85/0x150 kernel/sched/core.c:8790
folio_wait_bit_common+0x6a4/0x940 mm/filemap.c:1379
folio_wait_bit+0x29/0x50 mm/filemap.c:1518
folio_wait_writeback+0x90/0x1c0 mm/page-writeback.c:3197
__filemap_fdatawait_range+0x185/0x290 mm/filemap.c:589
filemap_write_and_wait_range+0x205/0x2a0 mm/filemap.c:750
filemap_write_and_wait include/linux/pagemap.h:68 [inline]
sync_blockdev block/bdev.c:241 [inline]
bdev_release+0x199/0x700 block/bdev.c:1107
blkdev_release+0x19/0x30 block/fops.c:635
__fput+0x20b/0xa30 fs/file_table.c:447
____fput+0x20/0x30 fs/file_table.c:475
task_work_run+0x1e5/0x260 kernel/task_work.c:246
resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f899f79e159
RSP: 002b:00007ffdd0d6b368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffdd0d6b450 RCX: 00007f899f79e159
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 000000000001c240 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b33920000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f899fa25fac R14: 00007f899fa25fa8 R15: 00007f899fa25fa0
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:114
nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:63
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
cpumask_backtrace+0x1f/0x30 lib/nmi_backtrace.c:127
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
watchdog+0xe45/0xf90 kernel/hung_task.c:423
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116
Code: cc cc cc cc cc cc cc b8 5b 0b ca a1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 07 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5553d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000089ae4
RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd
R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000
R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ece328
FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558c2a3918 CR3: 000000012ced8000 CR4: 00000000003526b0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline]
default_idle+0x17/0x30 arch/x86/kernel/process.c:754
arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791
default_idle_call+0x3e/0x80 kernel/sched/idle.c:117
cpuidle_idle_call kernel/sched/idle.c:193 [inline]
do_idle+0x1df/0x570 kernel/sched/idle.c:346
cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445
rest_init+0x10b/0x130 init/main.c:760
start_kernel+0x462/0x4bb init/main.c:1242
x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488
common_startup_64+0x13b/0x157
final repro crashed as (corrupted=false):
INFO: task kworker/u8:2:44 blocked for more than 122 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:2 state:D stack:0 pid:44 tgid:44 ppid:2 flags:0x00004000
Workqueue: loop0 loop_workfn
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
blk_mq_freeze_queue_wait+0xf3/0x180 block/blk-mq.c:210
blk_freeze_queue+0xc7/0x100 block/blk-mq.c:237
blk_mq_freeze_queue+0x19/0x30 block/blk-mq.c:246
queue_attr_store+0x2c9/0x3d0 block/blk-sysfs.c:703
sysfs_kf_write+0x13e/0x160 fs/sysfs/file.c:136
kernfs_fop_write_iter+0x316/0x510 fs/kernfs/file.c:352
lo_rw_aio+0xd36/0x1020 drivers/block/loop.c:-1
do_req_filebacked drivers/block/loop.c:447 [inline]
loop_handle_cmd drivers/block/loop.c:1900 [inline]
loop_process_work+0x589/0x12c0 drivers/block/loop.c:1935
loop_workfn+0x4e/0x70 drivers/block/loop.c:1959
process_one_work kernel/workqueue.c:3273 [inline]
process_scheduled_works+0x7f4/0x1060 kernel/workqueue.c:3354
worker_thread+0xc99/0x13f0 kernel/workqueue.c:3435
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task syz.2.17:382 blocked for more than 123 seconds.
Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.2.17 state:D stack:0 pid:382 tgid:382 ppid:378 flags:0x00004004
Call Trace:
context_switch kernel/sched/core.c:6063 [inline]
__schedule+0x1496/0x20b0 kernel/sched/core.c:7883
__schedule_loop kernel/sched/core.c:7960 [inline]
schedule+0xc5/0x240 kernel/sched/core.c:7975
io_schedule+0x85/0x150 kernel/sched/core.c:8790
folio_wait_bit_common+0x6a4/0x940 mm/filemap.c:1379
folio_wait_bit+0x29/0x50 mm/filemap.c:1518
folio_wait_writeback+0x90/0x1c0 mm/page-writeback.c:3197
__filemap_fdatawait_range+0x185/0x290 mm/filemap.c:589
filemap_write_and_wait_range+0x205/0x2a0 mm/filemap.c:750
filemap_write_and_wait include/linux/pagemap.h:68 [inline]
sync_blockdev block/bdev.c:241 [inline]
bdev_release+0x199/0x700 block/bdev.c:1107
blkdev_release+0x19/0x30 block/fops.c:635
__fput+0x20b/0xa30 fs/file_table.c:447
____fput+0x20/0x30 fs/file_table.c:475
task_work_run+0x1e5/0x260 kernel/task_work.c:246
resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
__syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f899f79e159
RSP: 002b:00007ffdd0d6b368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: 0000000000000000 RBX: 00007ffdd0d6b450 RCX: 00007f899f79e159
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 000000000001c240 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b33920000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f899fa25fac R14: 00007f899fa25fa8 R15: 00007f899fa25fa0
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:94
dump_stack_lvl+0x140/0x1c0 lib/dump_stack.c:120
dump_stack+0x19/0x20 lib/dump_stack.c:129
nmi_cpu_backtrace+0x2ba/0x2d0 lib/nmi_backtrace.c:114
nmi_trigger_cpumask_backtrace+0x142/0x2c0 lib/nmi_backtrace.c:63
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:41
cpumask_backtrace+0x1f/0x30 lib/nmi_backtrace.c:127
trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:267 [inline]
watchdog+0xe45/0xf90 kernel/hung_task.c:423
kthread+0x2c4/0x360 kernel/kthread.c:389
ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:pv_native_safe_halt+0x13/0x20 arch/x86/kernel/paravirt.c:116
Code: cc cc cc cc cc cc cc b8 5b 0b ca a1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 07 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2
RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5553d
RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000089ae4
RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd
R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000
R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ece328
FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055558c2a3918 CR3: 000000012ced8000 CR4: 00000000003526b0
Call Trace:
arch_safe_halt arch/x86/include/asm/paravirt.h:-1 [inline]
default_idle+0x17/0x30 arch/x86/kernel/process.c:754
arch_cpu_idle+0xd/0x20 arch/x86/kernel/process.c:791
default_idle_call+0x3e/0x80 kernel/sched/idle.c:117
cpuidle_idle_call kernel/sched/idle.c:193 [inline]
do_idle+0x1df/0x570 kernel/sched/idle.c:346
cpu_startup_entry+0x47/0x60 kernel/sched/idle.c:445
rest_init+0x10b/0x130 init/main.c:760
start_kernel+0x462/0x4bb init/main.c:1242
x86_64_start_reservations+0x2e/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x6a/0x7b arch/x86/kernel/head64.c:488
common_startup_64+0x13b/0x157