./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1485823303 <...> Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. execve("./syz-executor1485823303", ["./syz-executor1485823303"], 0x7fff89a3bd40 /* 10 vars */) = 0 brk(NULL) = 0x5555874d9000 brk(0x5555874d9d00) = 0x5555874d9d00 arch_prctl(ARCH_SET_FS, 0x5555874d9380) = 0 set_tid_address(0x5555874d9650) = 5089 set_robust_list(0x5555874d9660, 24) = 0 rseq(0x5555874d9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1485823303", 4096) = 28 getrandom("\x35\x38\xb0\x70\xfa\x5c\x0b\xc1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555874d9d00 brk(0x5555874fad00) = 0x5555874fad00 brk(0x5555874fb000) = 0x5555874fb000 mprotect(0x7f64506e3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x5555874d9660, 24 [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5090 [pid 5090] <... set_robust_list resumed>) = 0 [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached [pid 5090] <... clone resumed>, child_tidptr=0x5555874d9650) = 5091 ./strace-static-x86_64: Process 5092 attached [pid 5091] set_robust_list(0x5555874d9660, 24 [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5092 [pid 5092] set_robust_list(0x5555874d9660, 24 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5092] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5091] <... prctl resumed>) = 0 [pid 5091] setpgid(0, 0./strace-static-x86_64: Process 5094 attached ./strace-static-x86_64: Process 5093 attached ) = 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5093 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] set_robust_list(0x5555874d9660, 24 [pid 5092] <... clone resumed>, child_tidptr=0x5555874d9650) = 5094 [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] set_robust_list(0x5555874d9660, 24 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5093] <... set_robust_list resumed>) = 0 [pid 5093] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5096 attached ./strace-static-x86_64: Process 5095 attached ) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5093] <... clone resumed>, child_tidptr=0x5555874d9650) = 5096 [pid 5091] write(3, "1000", 4) = 4 [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5095 [pid 5096] set_robust_list(0x5555874d9660, 24 [pid 5095] set_robust_list(0x5555874d9660, 24 [pid 5094] setpgid(0, 0 [pid 5091] close(3 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5095] <... set_robust_list resumed>) = 0 [pid 5091] <... close resumed>) = 0 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5095] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5094] <... setpgid resumed>) = 0 executing program [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5091] write(1, "executing program\n", 18) = 18 [pid 5091] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5096] <... prctl resumed>) = 0 [pid 5094] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5098 attached ./strace-static-x86_64: Process 5097 attached [pid 5096] setpgid(0, 0 [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5098 [pid 5098] set_robust_list(0x5555874d9660, 24 [pid 5097] set_robust_list(0x5555874d9660, 24 [pid 5096] <... setpgid resumed>) = 0 [pid 5095] <... clone resumed>, child_tidptr=0x5555874d9650) = 5097 [pid 5094] write(3, "1000", 4 [pid 5091] dup(3 [pid 5089] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5098] <... set_robust_list resumed>) = 0 [pid 5097] <... set_robust_list resumed>) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program executing program [pid 5094] <... write resumed>) = 4 [pid 5091] <... dup resumed>) = 4 [pid 5098] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5096] <... openat resumed>) = 3 [pid 5094] close(3 [pid 5091] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5097] <... prctl resumed>) = 0 [pid 5096] write(3, "1000", 4 [pid 5094] <... close resumed>) = 0 [pid 5097] setpgid(0, 0 [pid 5096] <... write resumed>) = 4 [pid 5094] write(1, "executing program\n", 18 [pid 5097] <... setpgid resumed>) = 0 [pid 5096] close(3 [pid 5094] <... write resumed>) = 18 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5096] <... close resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5097] <... openat resumed>) = 3 [pid 5096] write(1, "executing program\n", 18 [pid 5094] <... openat resumed>) = 3 [pid 5096] <... write resumed>) = 18 [pid 5096] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5097] write(3, "1000", 4 [pid 5096] <... openat resumed>) = 3 [pid 5094] dup(3 [pid 5097] <... write resumed>) = 4 ./strace-static-x86_64: Process 5100 attached [pid 5089] <... clone resumed>, child_tidptr=0x5555874d9650) = 5100 [pid 5097] close(3 [pid 5096] dup(3 [pid 5094] <... dup resumed>) = 4 [pid 5097] <... close resumed>) = 0 [pid 5096] <... dup resumed>) = 4 [pid 5094] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5100] set_robust_list(0x5555874d9660, 24 [pid 5097] write(1, "executing program\n", 18executing program [pid 5096] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824./strace-static-x86_64: Process 5099 attached [pid 5100] <... set_robust_list resumed>) = 0 [pid 5098] <... clone resumed>, child_tidptr=0x5555874d9650) = 5099 [pid 5097] <... write resumed>) = 18 [pid 5099] set_robust_list(0x5555874d9660, 24 [pid 5097] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5099] <... set_robust_list resumed>) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] <... openat resumed>) = 3 [pid 5099] <... prctl resumed>) = 0 [pid 5099] setpgid(0, 0 [pid 5097] dup(3 [pid 5099] <... setpgid resumed>) = 0 [pid 5097] <... dup resumed>) = 4 executing program [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5097] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5099] <... openat resumed>) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] write(1, "executing program\n", 18) = 18 [pid 5099] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5099] dup(3) = 4 ./strace-static-x86_64: Process 5101 attached [pid 5099] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5101] set_robust_list(0x5555874d9660, 24 [pid 5100] <... clone resumed>, child_tidptr=0x5555874d9650) = 5101 [pid 5101] <... set_robust_list resumed>) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 executing program [pid 5101] write(1, "executing program\n", 18) = 18 [pid 5101] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5101] dup(3) = 4 [pid 5101] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5090] kill(-5091, SIGKILL) = 0 [pid 5090] kill(5091, SIGKILL) = 0 [pid 5092] kill(-5094, SIGKILL) = 0 [pid 5092] kill(5094, SIGKILL [pid 5093] kill(-5096, SIGKILL [pid 5092] <... kill resumed>) = 0 [pid 5093] <... kill resumed>) = 0 [pid 5093] kill(5096, SIGKILL) = 0 [pid 5095] kill(-5097, SIGKILL) = 0 [pid 5095] kill(5097, SIGKILL) = 0 [pid 5098] kill(-5099, SIGKILL) = 0 [pid 5098] kill(5099, SIGKILL) = 0 [pid 5100] kill(-5101, SIGKILL) = 0 [pid 5100] kill(5101, SIGKILL) = 0 [pid 5090] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5100] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5100] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5100] getdents64(3, [pid 5093] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5100] <... getdents64 resumed>0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5093] <... openat resumed>) = 3 [pid 5092] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5100] getdents64(3, [pid 5093] newfstatat(3, "", [pid 5090] newfstatat(3, "", [pid 5100] <... getdents64 resumed>0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5093] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5100] close(3 [pid 5093] getdents64(3, [pid 5090] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5100] <... close resumed>) = 0 [pid 5093] <... getdents64 resumed>0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5093] getdents64(3, [pid 5092] newfstatat(3, "", [pid 5090] getdents64(3, [pid 5093] <... getdents64 resumed>0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5092] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5090] <... getdents64 resumed>0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5093] close(3) = 0 [pid 5092] getdents64(3, [pid 5090] getdents64(3, 0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5092] <... getdents64 resumed>0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5090] close(3 [pid 5092] getdents64(3, [pid 5090] <... close resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5095] newfstatat(3, "", [pid 5098] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5095] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5092] <... getdents64 resumed>0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5095] getdents64(3, [pid 5092] close(3 [pid 5098] newfstatat(3, "", [pid 5095] <... getdents64 resumed>0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5092] <... close resumed>) = 0 [pid 5095] getdents64(3, 0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5095] close(3) = 0 [pid 5098] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5098] getdents64(3, 0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5098] getdents64(3, 0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5098] close(3) = 0 [ 86.364637][ T780] cfg80211: failed to load regulatory.db [pid 5091] <... fallocate resumed>) = ? [pid 5091] +++ killed by SIGKILL +++ [pid 5090] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5091, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=8035 /* 80.35 s */} --- [pid 5090] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5120 attached [pid 5120] set_robust_list(0x5555874d9660, 24 [pid 5090] <... clone resumed>, child_tidptr=0x5555874d9650) = 5120 [pid 5120] <... set_robust_list resumed>) = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5120] setpgid(0, 0) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5120] write(3, "1000", 4) = 4 [pid 5120] close(3) = 0 executing program [pid 5120] write(1, "executing program\n", 18) = 18 [pid 5120] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5120] dup(3) = 4 [pid 5120] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5090] kill(-5120, SIGKILL) = 0 [pid 5090] kill(5120, SIGKILL) = 0 [pid 5090] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5090] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5090] getdents64(3, 0x5555874da6f0 /* 2 entries */, 32768) = 48 [pid 5090] getdents64(3, 0x5555874da6f0 /* 0 entries */, 32768) = 0 [pid 5090] close(3) = 0 [ 286.023583][ T30] INFO: task syz-executor148:5096 blocked for more than 143 seconds. [ 286.032195][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 286.040321][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.049483][ T30] task:syz-executor148 state:D stack:26784 pid:5096 tgid:5096 ppid:5093 flags:0x00004006 [ 286.060177][ T30] Call Trace: [ 286.063561][ T30] [ 286.066934][ T30] __schedule+0x17e8/0x4a20 [ 286.071921][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.078328][ T30] ? __pfx___schedule+0x10/0x10 [ 286.083213][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.088992][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.095052][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.101391][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.106626][ T30] ? schedule+0x90/0x320 [ 286.110898][ T30] schedule+0x14b/0x320 [ 286.115151][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.120642][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.127131][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.133073][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.139730][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.146198][ T30] __down_write_common+0x1af/0x200 [ 286.151785][ T30] ? __pfx___down_write_common+0x10/0x10 [ 286.158171][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.164603][ T30] blkdev_fallocate+0x233/0x550 [ 286.169940][ T30] vfs_fallocate+0x566/0x6c0 [ 286.175052][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.180115][ T30] do_syscall_64+0xf3/0x230 [ 286.184739][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.190658][ T30] RIP: 0033:0x7f6450670b29 [ 286.195144][ T30] RSP: 002b:00007ffc092d90f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.204339][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6450670b29 [ 286.212762][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.221231][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.229977][ T30] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.238465][ T30] R13: 00007ffc092d9318 R14: 00007ffc092d9120 R15: 00007ffc092d9110 [ 286.247014][ T30] [ 286.250718][ T30] INFO: task syz-executor148:5097 blocked for more than 143 seconds. [ 286.259513][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 286.267267][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.276229][ T30] task:syz-executor148 state:D stack:26784 pid:5097 tgid:5097 ppid:5095 flags:0x00004006 [ 286.286551][ T30] Call Trace: [ 286.289874][ T30] [ 286.292823][ T30] __schedule+0x17e8/0x4a20 [ 286.297897][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.304043][ T30] ? __pfx___schedule+0x10/0x10 [ 286.309342][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.314904][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.321351][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.328167][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.333872][ T30] ? schedule+0x90/0x320 [ 286.338234][ T30] schedule+0x14b/0x320 [ 286.342423][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.348370][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.354246][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.360198][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.366461][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.371531][ T30] __down_write_common+0x1af/0x200 [ 286.376808][ T30] ? __pfx___down_write_common+0x10/0x10 [ 286.382926][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.389079][ T30] blkdev_fallocate+0x233/0x550 [ 286.394522][ T30] vfs_fallocate+0x566/0x6c0 [ 286.399574][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.405098][ T30] do_syscall_64+0xf3/0x230 [ 286.410073][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.416537][ T30] RIP: 0033:0x7f6450670b29 [ 286.421389][ T30] RSP: 002b:00007ffc092d90f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.429933][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6450670b29 [ 286.438091][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.446543][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.455083][ T30] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.471900][ T30] R13: 00007ffc092d9318 R14: 00007ffc092d9120 R15: 00007ffc092d9110 [ 286.481017][ T30] [ 286.485183][ T30] INFO: task syz-executor148:5099 blocked for more than 143 seconds. [ 286.493456][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 286.501107][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.509879][ T30] task:syz-executor148 state:D stack:26128 pid:5099 tgid:5099 ppid:5098 flags:0x00004006 [ 286.520135][ T30] Call Trace: [ 286.523514][ T30] [ 286.526466][ T30] __schedule+0x17e8/0x4a20 [ 286.531024][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.536776][ T30] ? __pfx___schedule+0x10/0x10 [ 286.541658][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.546817][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.552826][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.559241][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.564490][ T30] ? schedule+0x90/0x320 [ 286.569201][ T30] schedule+0x14b/0x320 [ 286.573894][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.579817][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.586417][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.592803][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.599534][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.604691][ T30] __down_write_common+0x1af/0x200 [ 286.609842][ T30] ? __pfx___down_write_common+0x10/0x10 [ 286.615558][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.621663][ T30] blkdev_fallocate+0x233/0x550 [ 286.627099][ T30] vfs_fallocate+0x566/0x6c0 [ 286.631739][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.636864][ T30] do_syscall_64+0xf3/0x230 [ 286.641403][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.647424][ T30] RIP: 0033:0x7f6450670b29 [ 286.652299][ T30] RSP: 002b:00007ffc092d90f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.661309][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6450670b29 [ 286.670016][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.678514][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.687070][ T30] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.695550][ T30] R13: 00007ffc092d9318 R14: 00007ffc092d9120 R15: 00007ffc092d9110 [ 286.704136][ T30] [ 286.707645][ T30] INFO: task syz-executor148:5101 blocked for more than 144 seconds. [ 286.715905][ T30] Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 286.723656][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.732429][ T30] task:syz-executor148 state:D stack:26784 pid:5101 tgid:5101 ppid:5100 flags:0x00004006 [ 286.743199][ T30] Call Trace: [ 286.747093][ T30] [ 286.750049][ T30] __schedule+0x17e8/0x4a20 [ 286.754676][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.760798][ T30] ? __pfx___schedule+0x10/0x10 [ 286.766251][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.771340][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.777883][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.784802][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 286.790438][ T30] ? schedule+0x90/0x320 [ 286.794814][ T30] schedule+0x14b/0x320 [ 286.799442][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.805035][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 286.810811][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 286.816853][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.823058][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.828241][ T30] __down_write_common+0x1af/0x200 [ 286.833468][ T30] ? __pfx___down_write_common+0x10/0x10 [ 286.839133][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.845310][ T30] blkdev_fallocate+0x233/0x550 [ 286.850217][ T30] vfs_fallocate+0x566/0x6c0 [ 286.854895][ T30] __x64_sys_fallocate+0xbd/0x110 [ 286.860390][ T30] do_syscall_64+0xf3/0x230 [ 286.865444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.871773][ T30] RIP: 0033:0x7f6450670b29 [ 286.876687][ T30] RSP: 002b:00007ffc092d90f8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.885647][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6450670b29 [ 286.894114][ T30] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 286.902107][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.910682][ T30] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 286.918824][ T30] R13: 00007ffc092d9318 R14: 00007ffc092d9120 R15: 00007ffc092d9110 [ 286.926932][ T30] [ 286.930125][ T30] [ 286.930125][ T30] Showing all locks held in the system: [ 286.937912][ T30] 1 lock held by khungtaskd/30: [ 286.942780][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.952842][ T30] 1 lock held by klogd/4529: [ 286.957575][ T30] 2 locks held by getty/4844: [ 286.962706][ T30] #0: ffff88802aba60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.972645][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 286.982892][ T30] 2 locks held by syz-executor148/5094: [ 286.988996][ T30] 1 lock held by syz-executor148/5096: [ 286.994523][ T30] #0: ffff88801d4a94c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.005755][ T30] 1 lock held by syz-executor148/5097: [ 287.011667][ T30] #0: ffff88801d4a94c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.022890][ T30] 1 lock held by syz-executor148/5099: [ 287.028861][ T30] #0: ffff88801d4a94c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.039633][ T30] 1 lock held by syz-executor148/5101: [ 287.045194][ T30] #0: ffff88801d4a94c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.056411][ T30] 1 lock held by syz-executor148/5120: [ 287.062318][ T30] #0: ffff88801d4a94c8 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x233/0x550 [ 287.073190][ T30] [ 287.075606][ T30] ============================================= [ 287.075606][ T30] [ 287.084129][ T30] NMI backtrace for cpu 1 [ 287.088469][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 287.098375][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.108433][ T30] Call Trace: [ 287.111712][ T30] [ 287.114648][ T30] dump_stack_lvl+0x241/0x360 [ 287.119347][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.124558][ T30] ? __pfx__printk+0x10/0x10 [ 287.129157][ T30] ? vprintk_emit+0x631/0x770 [ 287.133858][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.138912][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.143877][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.149355][ T30] ? _printk+0xd5/0x120 [ 287.153520][ T30] ? __pfx__printk+0x10/0x10 [ 287.158123][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.162990][ T30] ? __pfx__printk+0x10/0x10 [ 287.167584][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.173231][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.178275][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.184273][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.190283][ T30] watchdog+0xfde/0x1020 [ 287.194544][ T30] ? watchdog+0x1ea/0x1020 [ 287.198988][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.203674][ T30] kthread+0x2f2/0x390 [ 287.207761][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.212443][ T30] ? __pfx_kthread+0x10/0x10 [ 287.217044][ T30] ret_from_fork+0x4d/0x80 [ 287.221471][ T30] ? __pfx_kthread+0x10/0x10 [ 287.226075][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.230877][ T30] [ 287.234070][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.239290][ C0] NMI backtrace for cpu 0 [ 287.239303][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 287.239326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.239339][ C0] RIP: 0010:__read_once_word_nocheck+0xc/0x20 [ 287.239377][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 53 48 89 fb e8 87 ff 54 00 48 8b 03 <5b> e9 09 2a 6f 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 [ 287.239395][ C0] RSP: 0018:ffffc90000157598 EFLAGS: 00000246 [ 287.239415][ C0] RAX: ffffffff8205e235 RBX: ffffc90000157940 RCX: ffff888016ec5a00 [ 287.239432][ C0] RDX: 0000000080000101 RSI: 0000000000000001 RDI: ffffc90000157940 [ 287.239448][ C0] RBP: 1ffff9200002aed2 R08: ffffffff8140effd R09: ffffffff8140ef56 [ 287.239465][ C0] R10: 0000000000000003 R11: ffff888016ec5a00 R12: ffffc90000157940 [ 287.239481][ C0] R13: dffffc0000000000 R14: 1ffff9200002aed1 R15: 1ffff9200002aed0 [ 287.239501][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 287.239520][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.239535][ C0] CR2: 000055a7ba08f680 CR3: 000000000e132000 CR4: 0000000000350ef0 [ 287.239553][ C0] Call Trace: [ 287.239561][ C0] [ 287.239570][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.239602][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.239630][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.239660][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.239709][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.239736][ C0] ? nmi_handle+0x151/0x5a0 [ 287.239771][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.239808][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 287.239841][ C0] ? default_do_nmi+0x63/0x160 [ 287.239873][ C0] ? exc_nmi+0x123/0x1f0 [ 287.239903][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.239935][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 287.239966][ C0] ? unwind_next_frame+0x109d/0x2a00 [ 287.239997][ C0] ? __reset_page_owner+0x75/0x3f0 [ 287.240034][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 287.240068][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 287.240103][ C0] ? __read_once_word_nocheck+0xc/0x20 [ 287.240137][ C0] [ 287.240144][ C0] [ 287.240152][ C0] unwind_next_frame+0x1356/0x2a00 [ 287.240193][ C0] ? save_stack+0xfb/0x1f0 [ 287.240233][ C0] ? save_stack+0xfb/0x1f0 [ 287.240265][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.240290][ C0] arch_stack_walk+0x151/0x1b0 [ 287.240331][ C0] ? save_stack+0xfb/0x1f0 [ 287.240368][ C0] stack_trace_save+0x118/0x1d0 [ 287.240392][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 287.240417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240454][ C0] save_stack+0xfb/0x1f0 [ 287.240489][ C0] ? __pfx_save_stack+0x10/0x10 [ 287.240532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240565][ C0] ? page_ext_get+0x20/0x2a0 [ 287.240598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240631][ C0] __reset_page_owner+0x75/0x3f0 [ 287.240672][ C0] free_unref_page+0xd22/0xea0 [ 287.240709][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240740][ C0] ? rcu_core+0xa86/0x1830 [ 287.240762][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 287.240789][ C0] rcu_core+0xaff/0x1830 [ 287.240825][ C0] ? __pfx_rcu_core+0x10/0x10 [ 287.240851][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240880][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240909][ C0] ? sched_clock+0x4a/0x70 [ 287.240935][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.240964][ C0] ? sched_clock_cpu+0x76/0x490 [ 287.241000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.241029][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.241057][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.241090][ C0] handle_softirqs+0x2c6/0x970 [ 287.241117][ C0] ? run_ksoftirqd+0xca/0x130 [ 287.241147][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.241169][ C0] ? preempt_schedule+0xe1/0xf0 [ 287.241202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.241240][ C0] run_ksoftirqd+0xca/0x130 [ 287.241265][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.241290][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 287.241318][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.241348][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 287.241374][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 287.241397][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 287.241419][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 287.241443][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.241468][ C0] smpboot_thread_fn+0x546/0xa30 [ 287.241492][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 287.241521][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.241545][ C0] kthread+0x2f2/0x390 [ 287.241573][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.241597][ C0] ? __pfx_kthread+0x10/0x10 [ 287.241626][ C0] ret_from_fork+0x4d/0x80 [ 287.241656][ C0] ? __pfx_kthread+0x10/0x10 [ 287.241684][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.241731][ C0] [ 287.241740][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.449 msecs [ 287.263825][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.263845][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc1-syzkaller-00021-ge0cce98fe279 #0 [ 287.263873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.263888][ T30] Call Trace: [ 287.263899][ T30] [ 287.263910][ T30] dump_stack_lvl+0x241/0x360 [ 287.263951][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.263994][ T30] ? __pfx__printk+0x10/0x10 [ 287.264018][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.264056][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264089][ T30] ? vscnprintf+0x5d/0x90 [ 287.264126][ T30] panic+0x349/0x860 [ 287.264151][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264186][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.264223][ T30] ? __pfx_panic+0x10/0x10 [ 287.264246][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.264284][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264317][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.264346][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264379][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.264408][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.264441][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.264479][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.264511][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.264549][ T30] watchdog+0x101d/0x1020 [ 287.264582][ T30] ? watchdog+0x1ea/0x1020 [ 287.264619][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.264648][ T30] kthread+0x2f2/0x390 [ 287.264681][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.264709][ T30] ? __pfx_kthread+0x10/0x10 [ 287.264742][ T30] ret_from_fork+0x4d/0x80 [ 287.264777][ T30] ? __pfx_kthread+0x10/0x10 [ 287.264809][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.264864][ T30] [ 287.268208][ T30] Kernel Offset: disabled [ 287.916430][ T30] Rebooting in 86400 seconds..