./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2670535472 <...> Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. execve("./syz-executor2670535472", ["./syz-executor2670535472"], 0x7ffdbedd2a90 /* 10 vars */) = 0 brk(NULL) = 0x555585bb9000 brk(0x555585bb9d00) = 0x555585bb9d00 arch_prctl(ARCH_SET_FS, 0x555585bb9380) = 0 set_tid_address(0x555585bb9650) = 5842 set_robust_list(0x555585bb9660, 24) = 0 rseq(0x555585bb9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2670535472", 4096) = 28 getrandom("\x75\x52\xc3\x8d\x69\xa3\xbd\xc9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585bb9d00 brk(0x555585bdad00) = 0x555585bdad00 brk(0x555585bdb000) = 0x555585bdb000 mprotect(0x7f183227b000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5843 attached , child_tidptr=0x555585bb9650) = 5843 [pid 5843] set_robust_list(0x555585bb9660, 24) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached ./strace-static-x86_64: Process 5844 attached [pid 5845] set_robust_list(0x555585bb9660, 24) = 0 [pid 5844] set_robust_list(0x555585bb9660, 24 [pid 5843] <... clone resumed>, child_tidptr=0x555585bb9650) = 5844 [pid 5842] <... clone resumed>, child_tidptr=0x555585bb9650) = 5845 [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] <... set_robust_list resumed>) = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5844] <... prctl resumed>) = 0 [pid 5844] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5846 attached [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5847 attached [pid 5846] set_robust_list(0x555585bb9660, 24) = 0 [pid 5842] <... clone resumed>, child_tidptr=0x555585bb9650) = 5846 [pid 5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] <... clone resumed>, child_tidptr=0x555585bb9650) = 5847 [pid 5844] <... openat resumed>) = 3 [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] set_robust_list(0x555585bb9660, 24./strace-static-x86_64: Process 5849 attached ./strace-static-x86_64: Process 5848 attached ) = 0 [pid 5844] write(3, "1000", 4 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] <... write resumed>) = 4 [pid 5842] <... clone resumed>, child_tidptr=0x555585bb9650) = 5849 [pid 5847] <... prctl resumed>) = 0 [pid 5844] close(3 [pid 5848] set_robust_list(0x555585bb9660, 24 [pid 5847] setpgid(0, 0 [pid 5844] <... close resumed>) = 0 [pid 5848] <... set_robust_list resumed>) = 0 executing program [pid 5844] write(1, "executing program\n", 18 [pid 5842] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] set_robust_list(0x555585bb9660, 24 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5844] <... write resumed>) = 18 [pid 5849] <... set_robust_list resumed>) = 0 [pid 5847] <... setpgid resumed>) = 0 [pid 5846] <... clone resumed>, child_tidptr=0x555585bb9650) = 5848 [pid 5848] <... prctl resumed>) = 0 [pid 5848] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5850 attached [pid 5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5842] <... clone resumed>, child_tidptr=0x555585bb9650) = 5850 [pid 5850] set_robust_list(0x555585bb9660, 24executing program ./strace-static-x86_64: Process 5851 attached [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5847] <... openat resumed>) = 3 [pid 5850] <... set_robust_list resumed>) = 0 [pid 5844] <... openat resumed>) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] write(1, "executing program\n", 18) = 18 [pid 5847] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5847] dup(3 [pid 5844] dup(3 [pid 5847] <... dup resumed>) = 4 [pid 5847] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5844] <... dup resumed>) = 4 [ 257.689745][ T30] audit: type=1400 audit(1742336015.670:88): avc: denied { execmem } for pid=5842 comm="syz-executor267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5844] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5851] set_robust_list(0x555585bb9660, 24 [pid 5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5848] <... openat resumed>) = 3 [pid 5851] <... set_robust_list resumed>) = 0 [pid 5849] <... clone resumed>, child_tidptr=0x555585bb9650) = 5851 ./strace-static-x86_64: Process 5852 attached [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5850] <... clone resumed>, child_tidptr=0x555585bb9650) = 5852 [pid 5848] write(3, "1000", 4 [pid 5851] <... prctl resumed>) = 0 [pid 5848] <... write resumed>) = 4 [pid 5851] setpgid(0, 0 [pid 5848] close(3 [pid 5851] <... setpgid resumed>) = 0 [pid 5848] <... close resumed>) = 0 executing program [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5848] write(1, "executing program\n", 18 [pid 5851] <... openat resumed>) = 3 [pid 5848] <... write resumed>) = 18 [pid 5851] write(3, "1000", 4 [pid 5848] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT [pid 5851] <... write resumed>) = 4 [pid 5848] <... openat resumed>) = 3 [pid 5851] close(3 [pid 5848] dup(3 [pid 5851] <... close resumed>) = 0 [pid 5848] <... dup resumed>) = 4 executing program [pid 5851] write(1, "executing program\n", 18 [pid 5848] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5851] <... write resumed>) = 18 [pid 5851] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5851] dup(3) = 4 [pid 5851] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5852] set_robust_list(0x555585bb9660, 24) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 executing program [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5852] dup(3) = 4 [ 257.750640][ T30] audit: type=1400 audit(1742336015.730:89): avc: denied { read write } for pid=5844 comm="syz-executor267" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.774411][ T30] audit: type=1400 audit(1742336015.730:90): avc: denied { open } for pid=5844 comm="syz-executor267" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [pid 5852] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5843] kill(-5844, SIGKILL) = 0 [pid 5843] kill(5844, SIGKILL) = 0 [pid 5845] kill(-5847, SIGKILL) = 0 [pid 5845] kill(5847, SIGKILL) = 0 [pid 5846] kill(-5848, SIGKILL) = 0 [pid 5846] kill(5848, SIGKILL) = 0 [pid 5850] kill(-5852, SIGKILL) = 0 [pid 5849] kill(-5851, SIGKILL [pid 5850] kill(5852, SIGKILL [pid 5849] <... kill resumed>) = 0 [pid 5850] <... kill resumed>) = 0 [pid 5849] kill(5851, SIGKILL) = 0 [pid 5843] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] <... openat resumed>) = 3 [pid 5846] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] newfstatat(3, "", [pid 5850] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5849] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5850] newfstatat(3, "", [pid 5849] <... openat resumed>) = 3 [pid 5845] <... openat resumed>) = 3 [pid 5843] getdents64(3, [pid 5850] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5849] newfstatat(3, "", [pid 5846] newfstatat(3, "", [pid 5845] newfstatat(3, "", [pid 5843] <... getdents64 resumed>0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5849] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5846] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5845] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5843] getdents64(3, [pid 5849] getdents64(3, [pid 5846] getdents64(3, [pid 5845] getdents64(3, [pid 5843] <... getdents64 resumed>0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5849] <... getdents64 resumed>0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5846] <... getdents64 resumed>0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5845] <... getdents64 resumed>0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5843] close(3 [pid 5849] getdents64(3, [pid 5845] getdents64(3, [pid 5849] <... getdents64 resumed>0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5846] getdents64(3, [pid 5845] <... getdents64 resumed>0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5843] <... close resumed>) = 0 [pid 5850] getdents64(3, [pid 5849] close(3 [pid 5846] <... getdents64 resumed>0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5845] close(3 [pid 5850] <... getdents64 resumed>0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5849] <... close resumed>) = 0 [pid 5846] close(3 [pid 5845] <... close resumed>) = 0 [pid 5850] getdents64(3, [pid 5846] <... close resumed>) = 0 [pid 5850] <... getdents64 resumed>0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5850] close(3) = 0 [pid 5847] <... fallocate resumed>) = ? [pid 5847] +++ killed by SIGKILL +++ [pid 5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5847, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=8111 /* 81.11 s */} --- [pid 5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5859 attached , child_tidptr=0x555585bb9650) = 5859 [pid 5859] set_robust_list(0x555585bb9660, 24) = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5859] write(3, "1000", 4) = 4 [pid 5859] close(3) = 0 executing program [pid 5859] write(1, "executing program\n", 18) = 18 [pid 5859] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_DIRECT) = 3 [pid 5859] dup(3) = 4 [pid 5859] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 0, 17592202829824 [pid 5845] kill(-5859, SIGKILL) = 0 [pid 5845] kill(5859, SIGKILL) = 0 [pid 5845] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5845] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5845] getdents64(3, 0x555585bba6f0 /* 2 entries */, 32768) = 48 [pid 5845] getdents64(3, 0x555585bba6f0 /* 0 entries */, 32768) = 0 [pid 5845] close(3) = 0 [ 429.378947][ T31] INFO: task syz-executor267:5848 blocked for more than 143 seconds. [ 429.387660][ T31] Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 429.397667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.406918][ T31] task:syz-executor267 state:D stack:27424 pid:5848 tgid:5848 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 429.419464][ T31] Call Trace: [ 429.422745][ T31] [ 429.425674][ T31] __schedule+0xf43/0x5890 [ 429.430694][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 429.436490][ T31] ? mark_lock+0xb5/0xc60 [ 429.441489][ T31] ? __pfx_mark_lock+0x10/0x10 [ 429.446972][ T31] ? __pfx___schedule+0x10/0x10 [ 429.451874][ T31] ? schedule+0x298/0x350 [ 429.456206][ T31] ? __pfx_lock_release+0x10/0x10 [ 429.461385][ T31] ? lock_acquire+0x2f/0xb0 [ 429.465890][ T31] ? schedule+0x1fd/0x350 [ 429.470888][ T31] schedule+0xe7/0x350 [ 429.475526][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.481668][ T31] rwsem_down_write_slowpath+0x539/0x12a0 [ 429.488088][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 429.494916][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 429.500680][ T31] ? lock_acquire+0x2f/0xb0 [ 429.505190][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 429.510873][ T31] down_write+0x1d8/0x200 [ 429.515904][ T31] ? __pfx_down_write+0x10/0x10 [ 429.520832][ T31] ? inode_security+0x101/0x130 [ 429.525692][ T31] blkdev_fallocate+0x1d1/0x380 [ 429.530578][ T31] ? __pfx_blkdev_fallocate+0x10/0x10 [ 429.535955][ T31] vfs_fallocate+0x60d/0x10d0 [ 429.540704][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 429.545813][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.551035][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.556861][ T31] __x64_sys_fallocate+0xd5/0x150 [ 429.562652][ T31] do_syscall_64+0xcd/0x250 [ 429.567817][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.574356][ T31] RIP: 0033:0x7f1832208b29 [ 429.579431][ T31] RSP: 002b:00007ffd65f274a8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 429.588494][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1832208b29 [ 429.597163][ T31] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 429.605826][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 429.613860][ T31] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 429.621855][ T31] R13: 00007ffd65f276c8 R14: 00007ffd65f274d0 R15: 00007ffd65f274c0 [ 429.630489][ T31] [ 429.634114][ T31] INFO: task syz-executor267:5851 blocked for more than 143 seconds. [ 429.644607][ T31] Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 429.658320][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.667565][ T31] task:syz-executor267 state:D stack:28368 pid:5851 tgid:5851 ppid:5849 task_flags:0x400040 flags:0x00004006 [ 429.680062][ T31] Call Trace: [ 429.683880][ T31] [ 429.686812][ T31] __schedule+0xf43/0x5890 [ 429.691249][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 429.696452][ T31] ? mark_lock+0xb5/0xc60 [ 429.701013][ T31] ? __pfx_mark_lock+0x10/0x10 [ 429.705791][ T31] ? __pfx___schedule+0x10/0x10 [ 429.711259][ T31] ? schedule+0x298/0x350 [ 429.716163][ T31] ? __pfx_lock_release+0x10/0x10 [ 429.721852][ T31] ? lock_acquire+0x2f/0xb0 [ 429.726927][ T31] ? schedule+0x1fd/0x350 [ 429.731902][ T31] schedule+0xe7/0x350 [ 429.736683][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.742733][ T31] rwsem_down_write_slowpath+0x539/0x12a0 [ 429.749084][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 429.755261][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 429.760308][ T31] ? lock_acquire+0x2f/0xb0 [ 429.764814][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 429.769878][ T31] down_write+0x1d8/0x200 [ 429.774781][ T31] ? __pfx_down_write+0x10/0x10 [ 429.780227][ T31] ? inode_security+0x101/0x130 [ 429.785717][ T31] blkdev_fallocate+0x1d1/0x380 [ 429.791293][ T31] ? __pfx_blkdev_fallocate+0x10/0x10 [ 429.797358][ T31] vfs_fallocate+0x60d/0x10d0 [ 429.802693][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 429.808440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.814460][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.819708][ T31] __x64_sys_fallocate+0xd5/0x150 [ 429.824794][ T31] do_syscall_64+0xcd/0x250 [ 429.829341][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.835246][ T31] RIP: 0033:0x7f1832208b29 [ 429.840325][ T31] RSP: 002b:00007ffd65f274a8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 429.849354][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1832208b29 [ 429.857954][ T31] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 429.866551][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 429.875145][ T31] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 429.883858][ T31] R13: 00007ffd65f276c8 R14: 00007ffd65f274d0 R15: 00007ffd65f274c0 [ 429.892486][ T31] [ 429.896283][ T31] INFO: task syz-executor267:5852 blocked for more than 143 seconds. [ 429.904374][ T31] Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 429.912026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.920728][ T31] task:syz-executor267 state:D stack:27664 pid:5852 tgid:5852 ppid:5850 task_flags:0x400040 flags:0x00004006 [ 429.932701][ T31] Call Trace: [ 429.935983][ T31] [ 429.938940][ T31] __schedule+0xf43/0x5890 [ 429.943367][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 429.949221][ T31] ? mark_lock+0xb5/0xc60 [ 429.953567][ T31] ? __pfx_mark_lock+0x10/0x10 [ 429.959098][ T31] ? __pfx___schedule+0x10/0x10 [ 429.963959][ T31] ? schedule+0x298/0x350 [ 429.968296][ T31] ? __pfx_lock_release+0x10/0x10 [ 429.973377][ T31] ? lock_acquire+0x2f/0xb0 [ 429.977886][ T31] ? schedule+0x1fd/0x350 [ 429.982857][ T31] schedule+0xe7/0x350 [ 429.986940][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.992981][ T31] rwsem_down_write_slowpath+0x539/0x12a0 [ 429.999307][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 430.006110][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 430.011820][ T31] ? lock_acquire+0x2f/0xb0 [ 430.016333][ T31] ? blkdev_fallocate+0x1d1/0x380 [ 430.021389][ T31] down_write+0x1d8/0x200 [ 430.026322][ T31] ? __pfx_down_write+0x10/0x10 [ 430.031222][ T31] ? inode_security+0x101/0x130 [ 430.036085][ T31] blkdev_fallocate+0x1d1/0x380 [ 430.040986][ T31] ? __pfx_blkdev_fallocate+0x10/0x10 [ 430.046537][ T31] vfs_fallocate+0x60d/0x10d0 [ 430.051236][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 430.056350][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.061572][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.066779][ T31] __x64_sys_fallocate+0xd5/0x150 [ 430.071823][ T31] do_syscall_64+0xcd/0x250 [ 430.090859][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.097818][ T31] RIP: 0033:0x7f1832208b29 [ 430.102278][ T31] RSP: 002b:00007ffd65f274a8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 430.112055][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1832208b29 [ 430.121373][ T31] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004 [ 430.130357][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 430.139720][ T31] R10: 0000100001002000 R11: 0000000000000246 R12: 0000000000000001 [ 430.149063][ T31] R13: 00007ffd65f276c8 R14: 00007ffd65f274d0 R15: 00007ffd65f274c0 [ 430.158059][ T31] [ 430.161177][ T31] [ 430.161177][ T31] Showing all locks held in the system: [ 430.174932][ T31] 1 lock held by khungtaskd/31: [ 430.187424][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 430.213366][ T31] 2 locks held by kworker/u8:6/1332: [ 430.229708][ T31] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 430.246295][ T31] #1: ffff8880b8628a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 430.259236][ T31] 3 locks held by klogd/5183: [ 430.277527][ T31] 2 locks held by getty/5578: [ 430.283586][ T31] #0: ffff888031cbc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 430.294684][ T31] #1: ffffc90002fe62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 430.305869][ T31] 1 lock held by syz-executor267/5844: [ 430.312758][ T31] #0: ffff8880238d14c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1d1/0x380 [ 430.324814][ T31] 1 lock held by syz-executor267/5848: [ 430.331329][ T31] #0: ffff8880238d14c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1d1/0x380 [ 430.345080][ T31] 1 lock held by syz-executor267/5851: [ 430.366402][ T31] #0: ffff8880238d14c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1d1/0x380 [ 430.378143][ T31] 1 lock held by syz-executor267/5852: [ 430.383625][ T31] #0: ffff8880238d14c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1d1/0x380 [ 430.394971][ T31] 1 lock held by syz-executor267/5859: [ 430.401165][ T31] #0: ffff8880238d14c0 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1d1/0x380 [ 430.412535][ T31] [ 430.415553][ T31] ============================================= [ 430.415553][ T31] [ 430.424629][ T31] NMI backtrace for cpu 0 [ 430.424641][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 430.424659][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.424668][ T31] Call Trace: [ 430.424673][ T31] [ 430.424678][ T31] dump_stack_lvl+0x116/0x1f0 [ 430.424705][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 430.424722][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.424745][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 430.424764][ T31] watchdog+0xf62/0x12b0 [ 430.424793][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.424815][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.424837][ T31] ? __kthread_parkme+0x148/0x220 [ 430.424854][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.424878][ T31] kthread+0x3af/0x750 [ 430.424898][ T31] ? __pfx_kthread+0x10/0x10 [ 430.424921][ T31] ? __pfx_kthread+0x10/0x10 [ 430.424946][ T31] ret_from_fork+0x45/0x80 [ 430.424968][ T31] ? __pfx_kthread+0x10/0x10 [ 430.424987][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.425015][ T31] [ 430.425021][ T31] Sending NMI from CPU 0 to CPUs 1: [ 430.537816][ C1] NMI backtrace for cpu 1 [ 430.537829][ C1] CPU: 1 UID: 0 PID: 25 Comm: ksoftirqd/1 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 430.537847][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.537855][ C1] RIP: 0010:debug_check_no_obj_freed+0x2eb/0x600 [ 430.537879][ C1] Code: b9 00 01 00 00 00 00 ad de 49 89 57 08 48 89 c7 48 89 08 4c 89 68 08 e8 b3 ca ff ff 4c 89 f8 48 89 c2 48 c1 ea 03 80 3c 1a 00 <0f> 84 24 ff ff ff 48 89 c7 48 89 44 24 10 e8 92 df 52 fd 48 8b 44 [ 430.537891][ C1] RSP: 0018:ffffc900001f7ab0 EFLAGS: 00000046 [ 430.537903][ C1] RAX: ffff888145399118 RBX: dffffc0000000000 RCX: ffffffff81972ead [ 430.537912][ C1] RDX: 1ffff11028a73223 RSI: 0000000000000004 RDI: ffff888146b53c90 [ 430.537920][ C1] RBP: ffffc900001f7bf0 R08: 0000000000000001 R09: fffff5200003ef44 [ 430.537928][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff888080d88000 [ 430.537936][ C1] R13: dead000000000122 R14: 0000000000000003 R15: ffff888145399118 [ 430.537945][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 430.537959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.537968][ C1] CR2: 000055e372821020 CR3: 0000000030a04000 CR4: 00000000003526f0 [ 430.537976][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.537984][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.537991][ C1] Call Trace: [ 430.537996][ C1] [ 430.538001][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 430.538016][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.538033][ C1] ? nmi_handle+0x1ac/0x5d0 [ 430.538051][ C1] ? debug_check_no_obj_freed+0x2eb/0x600 [ 430.538066][ C1] ? default_do_nmi+0x6a/0x160 [ 430.538080][ C1] ? exc_nmi+0x170/0x1e0 [ 430.538091][ C1] ? end_repeat_nmi+0xf/0x53 [ 430.538111][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 430.538124][ C1] ? debug_check_no_obj_freed+0x2eb/0x600 [ 430.538140][ C1] ? debug_check_no_obj_freed+0x2eb/0x600 [ 430.538157][ C1] ? debug_check_no_obj_freed+0x2eb/0x600 [ 430.538173][ C1] [ 430.538177][ C1] [ 430.538184][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 430.538202][ C1] ? page_ext_put+0x48/0xd0 [ 430.538217][ C1] free_frozen_pages+0x283/0xfb0 [ 430.538232][ C1] ? rcu_core+0x79b/0x14d0 [ 430.538243][ C1] rcu_core+0x79d/0x14d0 [ 430.538257][ C1] ? __pfx_rcu_core+0x10/0x10 [ 430.538271][ C1] handle_softirqs+0x213/0x8f0 [ 430.538292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 430.538309][ C1] ? rcu_is_watching+0x12/0xc0 [ 430.538324][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 430.538340][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 430.538353][ C1] run_ksoftirqd+0x3a/0x60 [ 430.538370][ C1] smpboot_thread_fn+0x661/0xa30 [ 430.538382][ C1] ? __kthread_parkme+0x148/0x220 [ 430.538395][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 430.538408][ C1] kthread+0x3af/0x750 [ 430.538422][ C1] ? __pfx_kthread+0x10/0x10 [ 430.538437][ C1] ? lock_acquire+0x2f/0xb0 [ 430.538454][ C1] ? __pfx_kthread+0x10/0x10 [ 430.538469][ C1] ret_from_fork+0x45/0x80 [ 430.538486][ C1] ? __pfx_kthread+0x10/0x10 [ 430.538500][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.538518][ C1] [ 430.539875][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.539885][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 430.539901][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.539909][ T31] Call Trace: [ 430.539914][ T31] [ 430.539919][ T31] dump_stack_lvl+0x3d/0x1f0 [ 430.539946][ T31] panic+0x71d/0x800 [ 430.539963][ T31] ? __pfx_panic+0x10/0x10 [ 430.539978][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 430.539999][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.540018][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 430.540037][ T31] ? watchdog+0xdcc/0x12b0 [ 430.540057][ T31] ? watchdog+0xdbf/0x12b0 [ 430.540080][ T31] watchdog+0xddd/0x12b0 [ 430.540102][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.540121][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 430.540140][ T31] ? __kthread_parkme+0x148/0x220 [ 430.540155][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.540176][ T31] kthread+0x3af/0x750 [ 430.540193][ T31] ? __pfx_kthread+0x10/0x10 [ 430.540212][ T31] ? __pfx_kthread+0x10/0x10 [ 430.540229][ T31] ret_from_fork+0x45/0x80 [ 430.540246][ T31] ? __pfx_kthread+0x10/0x10 [ 430.540263][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.540285][ T31] [ 430.975006][ T31] Kernel Offset: disabled [ 430.979309][ T31] Rebooting in 86400 seconds..