./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2841649431 <...> Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. execve("./syz-executor2841649431", ["./syz-executor2841649431"], 0x7ffdcd2d97d0 /* 10 vars */) = 0 brk(NULL) = 0x55556f4a2000 brk(0x55556f4a2d00) = 0x55556f4a2d00 arch_prctl(ARCH_SET_FS, 0x55556f4a2380) = 0 set_tid_address(0x55556f4a2650) = 5852 set_robust_list(0x55556f4a2660, 24) = 0 rseq(0x55556f4a2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2841649431", 4096) = 28 getrandom("\xe5\x80\x4e\x40\x6b\x7c\x20\x1e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556f4a2d00 brk(0x55556f4c3d00) = 0x55556f4c3d00 brk(0x55556f4c4000) = 0x55556f4c4000 mprotect(0x7fa9d801a000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached , child_tidptr=0x55556f4a2650) = 5853 [pid 5853] set_robust_list(0x55556f4a2660, 24 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5853] <... set_robust_list resumed>) = 0 [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached ./strace-static-x86_64: Process 5855 attached [pid 5854] set_robust_list(0x55556f4a2660, 24 [pid 5853] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5855 [pid 5855] set_robust_list(0x55556f4a2660, 24 [pid 5852] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5854 [pid 5854] <... set_robust_list resumed>) = 0 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... set_robust_list resumed>) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5856 attached [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5854] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5852] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5856 [pid 5856] set_robust_list(0x55556f4a2660, 24 [pid 5855] <... openat resumed>) = 3 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] write(3, "1000", 4 [pid 5856] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached [pid 5857] set_robust_list(0x55556f4a2660, 24 [pid 5855] <... write resumed>) = 4 [pid 5854] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5857 ./strace-static-x86_64: Process 5859 attached [pid 5852] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5858 [pid 5858] set_robust_list(0x55556f4a2660, 24 [pid 5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] set_robust_list(0x55556f4a2660, 24 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5856] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5859 [pid 5855] close(3 [pid 5859] <... set_robust_list resumed>) = 0 [pid 5858] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILLexecuting program ./strace-static-x86_64: Process 5860 attached ) = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] <... close resumed>) = 0 [pid 5857] <... prctl resumed>) = 0 [pid 5855] write(1, "executing program\n", 18 [pid 5857] setpgid(0, 0 [pid 5855] <... write resumed>) = 18 [pid 5857] <... setpgid resumed>) = 0 [pid 5860] set_robust_list(0x55556f4a2660, 24 [pid 5859] setpgid(0, 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5855] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC [pid 5852] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5860 [pid 5860] <... set_robust_list resumed>) = 0 [pid 5859] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5861 attached [pid 5860] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5857] <... openat resumed>) = 3 [pid 5855] <... openat resumed>) = 3 [pid 5861] set_robust_list(0x55556f4a2660, 24 [pid 5858] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5861 [pid 5861] <... set_robust_list resumed>) = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5859] <... openat resumed>) = 3 [pid 5855] dup(3 [pid 5861] <... prctl resumed>) = 0 [pid 5857] write(3, "1000", 4 [pid 5855] <... dup resumed>) = 4 ./strace-static-x86_64: Process 5862 attached [pid 5861] setpgid(0, 0 [pid 5859] write(3, "1000", 4 [pid 5857] <... write resumed>) = 4 [pid 5855] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496 [pid 5862] set_robust_list(0x55556f4a2660, 24 [pid 5861] <... setpgid resumed>) = 0 [pid 5860] <... clone resumed>, child_tidptr=0x55556f4a2650) = 5862 [pid 5859] <... write resumed>) = 4 [pid 5857] close(3 [pid 5862] <... set_robust_list resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] close(3 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5859] <... close resumed>) = 0 executing program [pid 5857] <... close resumed>) = 0 [pid 5859] write(1, "executing program\n", 18 [pid 5862] <... prctl resumed>) = 0 [pid 5859] <... write resumed>) = 18 [pid 5862] setpgid(0, 0 [pid 5859] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC [pid 5862] <... setpgid resumed>) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] <... openat resumed>) = 3 [pid 5859] dup(3executing program [pid 5862] <... openat resumed>) = 3 [pid 5861] <... openat resumed>) = 3 [pid 5859] <... dup resumed>) = 4 [pid 5857] write(1, "executing program\n", 18) = 18 [pid 5862] write(3, "1000", 4 [pid 5861] write(3, "1000", 4 [pid 5859] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496 [pid 5857] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC [pid 5862] <... write resumed>) = 4 [pid 5861] <... write resumed>) = 4 [pid 5857] <... openat resumed>) = 3 [pid 5861] close(3 [pid 5857] dup(3 [pid 5861] <... close resumed>) = 0 [pid 5857] <... dup resumed>) = 4 [pid 5862] close(3 [pid 5861] write(1, "executing program\n", 18 [pid 5857] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496executing program executing program [pid 5861] <... write resumed>) = 18 [pid 5862] <... close resumed>) = 0 [pid 5861] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC [pid 5862] write(1, "executing program\n", 18) = 18 [pid 5861] <... openat resumed>) = 3 [pid 5862] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC [pid 5861] dup(3 [pid 5862] <... openat resumed>) = 3 [pid 5862] dup(3 [pid 5861] <... dup resumed>) = 4 [pid 5862] <... dup resumed>) = 4 [pid 5861] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496 [pid 5862] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496 [pid 5853] kill(-5855, SIGKILL) = 0 [pid 5853] kill(5855, SIGKILL) = 0 [pid 5854] kill(-5857, SIGKILL) = 0 [pid 5854] kill(5857, SIGKILL) = 0 [pid 5858] kill(-5861, SIGKILL [pid 5856] kill(-5859, SIGKILL [pid 5858] <... kill resumed>) = 0 [pid 5856] <... kill resumed>) = 0 [pid 5858] kill(5861, SIGKILL [pid 5856] kill(5859, SIGKILL [pid 5858] <... kill resumed>) = 0 [pid 5856] <... kill resumed>) = 0 [pid 5860] kill(-5862, SIGKILL) = 0 [pid 5860] kill(5862, SIGKILL) = 0 [pid 5854] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5853] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] <... openat resumed>) = 3 [pid 5853] <... openat resumed>) = 3 [pid 5854] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5853] newfstatat(3, "", [pid 5854] getdents64(3, 0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5853] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, [pid 5854] getdents64(3, 0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5854] close(3 [pid 5853] <... getdents64 resumed>0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5854] <... close resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5853] getdents64(3, [pid 5858] <... openat resumed>) = 3 [pid 5853] <... getdents64 resumed>0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5858] newfstatat(3, "", [pid 5853] close(3 [pid 5858] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5858] getdents64(3, [pid 5853] <... close resumed>) = 0 [pid 5858] <... getdents64 resumed>0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5860] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5858] getdents64(3, [pid 5856] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5860] <... openat resumed>) = 3 [pid 5858] <... getdents64 resumed>0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5860] newfstatat(3, "", [pid 5858] close(3 [pid 5856] newfstatat(3, "", [pid 5860] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5858] <... close resumed>) = 0 [pid 5856] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5860] getdents64(3, [pid 5856] getdents64(3, [pid 5860] <... getdents64 resumed>0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5856] <... getdents64 resumed>0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5860] getdents64(3, [pid 5856] getdents64(3, [pid 5860] <... getdents64 resumed>0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5856] <... getdents64 resumed>0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5860] close(3 [pid 5856] close(3 [pid 5860] <... close resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5855] <... fallocate resumed>) = ? [pid 5855] +++ killed by SIGKILL +++ [pid 5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5855, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=11076 /* 110.76 s */} --- [pid 5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached , child_tidptr=0x55556f4a2650) = 5877 [pid 5877] set_robust_list(0x55556f4a2660, 24) = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 executing program [pid 5877] close(3) = 0 [pid 5877] write(1, "executing program\n", 18) = 18 [pid 5877] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_TRUNC|O_APPEND|O_NONBLOCK|__O_SYNC|O_NOFOLLOW|O_NOATIME|FASYNC) = 3 [pid 5877] dup(3) = 4 [pid 5877] fallocate(4, FALLOC_FL_ZERO_RANGE, 0, 137438954496 [pid 5853] kill(-5877, SIGKILL) = 0 [pid 5853] kill(5877, SIGKILL) = 0 [pid 5853] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5853] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5853] getdents64(3, 0x55556f4a36f0 /* 2 entries */, 32768) = 48 [pid 5853] getdents64(3, 0x55556f4a36f0 /* 0 entries */, 32768) = 0 [pid 5853] close(3) = 0 [ 286.414808][ T31] INFO: task syz-executor284:5857 blocked for more than 143 seconds. [ 286.423054][ T31] Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 [ 286.444721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.453573][ T31] task:syz-executor284 state:D stack:28008 pid:5857 tgid:5857 ppid:5854 task_flags:0x400040 flags:0x00004006 [ 286.483631][ T31] Call Trace: [ 286.494601][ T31] [ 286.497593][ T31] __schedule+0x16f5/0x4d00 [ 286.514557][ T31] ? xfd_validate_state+0x6d/0x150 [ 286.519757][ T31] ? save_fpregs_to_fpstate+0xa3/0x210 [ 286.532228][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.537184][ T31] ? schedule+0x165/0x360 [ 286.541568][ T31] ? __pfx___schedule+0x10/0x10 [ 286.564624][ T31] ? schedule+0x91/0x360 [ 286.568941][ T31] schedule+0x165/0x360 [ 286.573151][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.584573][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 286.590389][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 286.596488][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.602682][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.607603][ T31] ? blkdev_fallocate+0x1d8/0x4b0 [ 286.612683][ T31] down_write+0x1ab/0x1f0 [ 286.617194][ T31] ? __pfx_down_write+0x10/0x10 [ 286.622078][ T31] ? end_current_label_crit_section+0x152/0x180 [ 286.628385][ T31] blkdev_fallocate+0x1d8/0x4b0 [ 286.633278][ T31] vfs_fallocate+0x6a3/0x830 [ 286.638052][ T31] ? __pfx_ptrace_notify+0x10/0x10 [ 286.643213][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.648395][ T31] __x64_sys_fallocate+0xc0/0x110 [ 286.653452][ T31] do_syscall_64+0xfa/0x3b0 [ 286.658129][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.663386][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.669627][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.674432][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.680490][ T31] RIP: 0033:0x7fa9d7fa7b29 [ 286.685372][ T31] RSP: 002b:00007ffdb077f4e8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.693825][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9d7fa7b29 [ 286.701916][ T31] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004 [ 286.709959][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 286.718114][ T31] R10: 0000002000000400 R11: 0000000000000246 R12: 0000000000000001 [ 286.726138][ T31] R13: 00007ffdb077f708 R14: 00007ffdb077f510 R15: 00007ffdb077f500 [ 286.734160][ T31] [ 286.744625][ T31] INFO: task syz-executor284:5861 blocked for more than 143 seconds. [ 286.752886][ T31] Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 [ 286.774605][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.783481][ T31] task:syz-executor284 state:D stack:27240 pid:5861 tgid:5861 ppid:5858 task_flags:0x400040 flags:0x00004006 [ 286.804576][ T31] Call Trace: [ 286.808055][ T31] [ 286.811015][ T31] __schedule+0x16f5/0x4d00 [ 286.824590][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 286.834636][ T31] ? sched_clock+0x3f/0x60 [ 286.839183][ T31] ? sched_clock_cpu+0x74/0x430 [ 286.844171][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.864573][ T31] ? schedule+0x165/0x360 [ 286.869054][ T31] ? __pfx___schedule+0x10/0x10 [ 286.873962][ T31] ? schedule+0x91/0x360 [ 286.884555][ T31] schedule+0x165/0x360 [ 286.888782][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.894280][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 286.924644][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 286.930628][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 286.944560][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.949492][ T31] ? blkdev_fallocate+0x1d8/0x4b0 [ 286.954679][ T31] down_write+0x1ab/0x1f0 [ 286.959144][ T31] ? __pfx_down_write+0x10/0x10 [ 286.964033][ T31] ? end_current_label_crit_section+0x152/0x180 [ 286.970335][ T31] blkdev_fallocate+0x1d8/0x4b0 [ 286.975330][ T31] vfs_fallocate+0x6a3/0x830 [ 286.979977][ T31] ? __pfx_ptrace_notify+0x10/0x10 [ 286.985159][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.990398][ T31] __x64_sys_fallocate+0xc0/0x110 [ 286.995555][ T31] do_syscall_64+0xfa/0x3b0 [ 287.000095][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.005358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.011455][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.016256][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.022178][ T31] RIP: 0033:0x7fa9d7fa7b29 [ 287.026668][ T31] RSP: 002b:00007ffdb077f4e8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.035214][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9d7fa7b29 [ 287.043220][ T31] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004 [ 287.051251][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.059398][ T31] R10: 0000002000000400 R11: 0000000000000246 R12: 0000000000000001 [ 287.067432][ T31] R13: 00007ffdb077f708 R14: 00007ffdb077f510 R15: 00007ffdb077f500 [ 287.075541][ T31] [ 287.078653][ T31] INFO: task syz-executor284:5862 blocked for more than 144 seconds. [ 287.094770][ T31] Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 [ 287.102109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.144602][ T31] task:syz-executor284 state:D stack:28008 pid:5862 tgid:5862 ppid:5860 task_flags:0x400040 flags:0x00004006 [ 287.174775][ T31] Call Trace: [ 287.178113][ T31] [ 287.181079][ T31] __schedule+0x16f5/0x4d00 [ 287.209479][ T31] ? xfd_validate_state+0x6d/0x150 [ 287.224619][ T31] ? save_fpregs_to_fpstate+0xa3/0x210 [ 287.230173][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.244564][ T31] ? schedule+0x165/0x360 [ 287.248981][ T31] ? __pfx___schedule+0x10/0x10 [ 287.253897][ T31] ? schedule+0x91/0x360 [ 287.274614][ T31] schedule+0x165/0x360 [ 287.278852][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.284369][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 287.290174][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 287.296207][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.302401][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.307336][ T31] ? blkdev_fallocate+0x1d8/0x4b0 [ 287.312420][ T31] down_write+0x1ab/0x1f0 [ 287.316928][ T31] ? __pfx_down_write+0x10/0x10 [ 287.321832][ T31] ? end_current_label_crit_section+0x152/0x180 [ 287.328157][ T31] blkdev_fallocate+0x1d8/0x4b0 [ 287.333060][ T31] vfs_fallocate+0x6a3/0x830 [ 287.337789][ T31] ? __pfx_ptrace_notify+0x10/0x10 [ 287.342953][ T31] ? __pfx_vfs_fallocate+0x10/0x10 [ 287.348139][ T31] __x64_sys_fallocate+0xc0/0x110 [ 287.353213][ T31] do_syscall_64+0xfa/0x3b0 [ 287.357867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.363103][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.369240][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.373969][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.380057][ T31] RIP: 0033:0x7fa9d7fa7b29 [ 287.384502][ T31] RSP: 002b:00007ffdb077f4e8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.392999][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9d7fa7b29 [ 287.401094][ T31] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004 [ 287.409123][ T31] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.417300][ T31] R10: 0000002000000400 R11: 0000000000000246 R12: 0000000000000001 [ 287.425333][ T31] R13: 00007ffdb077f708 R14: 00007ffdb077f510 R15: 00007ffdb077f500 [ 287.433348][ T31] [ 287.436535][ T31] [ 287.436535][ T31] Showing all locks held in the system: [ 287.444279][ T31] 1 lock held by khungtaskd/31: [ 287.449295][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.459314][ T31] 1 lock held by klogd/5193: [ 287.463933][ T31] 2 locks held by getty/5596: [ 287.480267][ T31] #0: ffff888030e5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.490204][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 287.500492][ T31] 1 lock held by syz-executor284/5857: [ 287.524843][ T31] #0: ffff888148c21320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x1d8/0x4b0 [ 287.553163][ T31] 4 locks held by syz-executor284/5859: [ 287.558846][ T31] 1 lock held by syz-executor284/5861: [ 287.564327][ T31] #0: ffff888148c21320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x1d8/0x4b0 [ 287.591758][ T31] 1 lock held by syz-executor284/5862: [ 287.604592][ T31] #0: ffff888148c21320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x1d8/0x4b0 [ 287.623473][ T31] 1 lock held by syz-executor284/5877: [ 287.634600][ T31] #0: ffff888148c21320 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_fallocate+0x1d8/0x4b0 [ 287.657235][ T31] [ 287.659704][ T31] ============================================= [ 287.659704][ T31] [ 287.684612][ T31] NMI backtrace for cpu 0 [ 287.684637][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 287.684658][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.684668][ T31] Call Trace: [ 287.684675][ T31] [ 287.684683][ T31] dump_stack_lvl+0x189/0x250 [ 287.684720][ T31] ? __wake_up_klogd+0xd9/0x110 [ 287.684744][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.684773][ T31] ? __pfx__printk+0x10/0x10 [ 287.684804][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 287.684833][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.684854][ T31] ? _printk+0xcf/0x120 [ 287.684877][ T31] ? __pfx__printk+0x10/0x10 [ 287.684897][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.684925][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 287.684952][ T31] watchdog+0xfee/0x1030 [ 287.684979][ T31] ? watchdog+0x1de/0x1030 [ 287.685011][ T31] kthread+0x70e/0x8a0 [ 287.685035][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.685059][ T31] ? __pfx_kthread+0x10/0x10 [ 287.685081][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.685108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.685134][ T31] ? __pfx_kthread+0x10/0x10 [ 287.685155][ T31] ret_from_fork+0x3f9/0x770 [ 287.685182][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.685213][ T31] ? __switch_to_asm+0x39/0x70 [ 287.685230][ T31] ? __switch_to_asm+0x33/0x70 [ 287.685248][ T31] ? __pfx_kthread+0x10/0x10 [ 287.685269][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.685302][ T31] [ 287.685309][ T31] Sending NMI from CPU 0 to CPUs 1: [ 287.845101][ C1] NMI backtrace for cpu 1 [ 287.845116][ C1] CPU: 1 UID: 0 PID: 5859 Comm: syz-executor284 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 287.845135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.845145][ C1] RIP: 0010:lock_acquire+0x154/0x360 [ 287.845172][ C1] Code: 8d e8 a0 dd c7 09 b8 ff ff ff ff 65 0f c1 05 93 ea fe 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 [ 287.845185][ C1] RSP: 0018:ffffc90004466d80 EFLAGS: 00000046 [ 287.845199][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c632536a7c243600 [ 287.845210][ C1] RDX: 0000000000000000 RSI: ffffffff8db6e382 RDI: ffffffff8be28280 [ 287.845221][ C1] RBP: ffffffff81ab750d R08: 0000000000000000 R09: ffffffff81ab750d [ 287.845232][ C1] R10: ffffc90004466ef8 R11: ffffffff81acf990 R12: 0000000000000002 [ 287.845242][ C1] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 287.845253][ C1] FS: 000055556f4a2380(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 287.845266][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.845277][ C1] CR2: 000055ab21972168 CR3: 00000000729b8000 CR4: 00000000003526f0 [ 287.845291][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.845300][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.845309][ C1] Call Trace: [ 287.845315][ C1] [ 287.845325][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.845350][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 287.845374][ C1] ? is_module_text_address+0x1d/0x1e0 [ 287.845395][ C1] is_module_text_address+0x39/0x1e0 [ 287.845413][ C1] ? is_module_text_address+0x1d/0x1e0 [ 287.845433][ C1] kernel_text_address+0x94/0xe0 [ 287.845461][ C1] __kernel_text_address+0xd/0x40 [ 287.845481][ C1] unwind_get_return_address+0x4d/0x90 [ 287.845505][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.845523][ C1] arch_stack_walk+0xfc/0x150 [ 287.845545][ C1] stack_trace_save+0x9c/0xe0 [ 287.845562][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.845580][ C1] ? __kernel_text_address+0xd/0x40 [ 287.845600][ C1] ? unwind_get_return_address+0x4d/0x90 [ 287.845627][ C1] kasan_save_stack+0x3e/0x60 [ 287.845640][ C1] ? kasan_save_stack+0x3e/0x60 [ 287.845653][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 287.845673][ C1] ? call_rcu+0x142/0x990 [ 287.845687][ C1] ? kmem_cache_free+0x309/0x400 [ 287.845704][ C1] ? bio_endio+0x3f/0x870 [ 287.845724][ C1] ? blk_update_request+0x5eb/0xe70 [ 287.845742][ C1] ? blk_mq_end_request+0x3e/0x70 [ 287.845761][ C1] ? null_queue_rq+0xbfe/0xe30 [ 287.845782][ C1] ? null_queue_rqs+0x123/0x270 [ 287.845803][ C1] ? blk_mq_dispatch_queue_requests+0x417/0x800 [ 287.845826][ C1] ? blk_mq_flush_plug_list+0x432/0x550 [ 287.845849][ C1] ? blk_add_rq_to_plug+0x175/0x450 [ 287.845869][ C1] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 287.845891][ C1] ? __submit_bio+0x207/0x5a0 [ 287.845904][ C1] ? submit_bio_noacct_nocheck+0x505/0xb50 [ 287.845945][ C1] ? bio_chain_and_submit+0xeb/0x130 [ 287.845964][ C1] ? __blkdev_issue_zero_pages+0x24f/0x2c0 [ 287.845982][ C1] ? blkdev_issue_zeroout+0x56c/0x7c0 [ 287.846000][ C1] ? blkdev_fallocate+0x3e6/0x4b0 [ 287.846017][ C1] ? vfs_fallocate+0x6a3/0x830 [ 287.846034][ C1] ? __x64_sys_fallocate+0xc0/0x110 [ 287.846051][ C1] ? do_syscall_64+0xfa/0x3b0 [ 287.846067][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.846102][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 287.846124][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 287.846147][ C1] call_rcu+0x142/0x990 [ 287.846167][ C1] ? __pfx_call_rcu+0x10/0x10 [ 287.846186][ C1] ? __phys_addr+0xd3/0x180 [ 287.846204][ C1] ? bio_endio+0x3f/0x870 [ 287.846225][ C1] kmem_cache_free+0x309/0x400 [ 287.846244][ C1] bio_endio+0x3f/0x870 [ 287.846268][ C1] blk_update_request+0x5eb/0xe70 [ 287.846296][ C1] blk_mq_end_request+0x3e/0x70 [ 287.846318][ C1] null_queue_rq+0xbfe/0xe30 [ 287.846347][ C1] null_queue_rqs+0x123/0x270 [ 287.846374][ C1] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 287.846400][ C1] blk_mq_dispatch_queue_requests+0x417/0x800 [ 287.846429][ C1] blk_mq_flush_plug_list+0x432/0x550 [ 287.846463][ C1] ? update_io_ticks+0x21f/0x260 [ 287.846489][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.846521][ C1] blk_add_rq_to_plug+0x175/0x450 [ 287.846545][ C1] blk_mq_submit_bio+0xbd3/0x22d0 [ 287.846575][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 287.846606][ C1] ? irqentry_exit+0x74/0x90 [ 287.846624][ C1] __submit_bio+0x207/0x5a0 [ 287.846641][ C1] ? __pfx___submit_bio+0x10/0x10 [ 287.846655][ C1] ? blk_cgroup_bio_start+0x291/0x640 [ 287.846690][ C1] submit_bio_noacct_nocheck+0x505/0xb50 [ 287.846716][ C1] ? pfn_valid+0x125/0x4d0 [ 287.846739][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 287.846775][ C1] bio_chain_and_submit+0xeb/0x130 [ 287.846797][ C1] __blkdev_issue_zero_pages+0x24f/0x2c0 [ 287.846819][ C1] blkdev_issue_zeroout+0x56c/0x7c0 [ 287.846838][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 287.846856][ C1] ? __pfx_blkdev_issue_zeroout+0x10/0x10 [ 287.846880][ C1] ? __pfx_truncate_bdev_range+0x10/0x10 [ 287.846909][ C1] ? truncate_bdev_range+0xed/0x100 [ 287.846935][ C1] blkdev_fallocate+0x3e6/0x4b0 [ 287.846958][ C1] vfs_fallocate+0x6a3/0x830 [ 287.846975][ C1] ? __pfx_ptrace_notify+0x10/0x10 [ 287.847001][ C1] ? __pfx_vfs_fallocate+0x10/0x10 [ 287.847023][ C1] __x64_sys_fallocate+0xc0/0x110 [ 287.847043][ C1] do_syscall_64+0xfa/0x3b0 [ 287.847059][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.847085][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.847101][ C1] ? clear_bhb_loop+0x60/0xb0 [ 287.847120][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.847136][ C1] RIP: 0033:0x7fa9d7fa7b29 [ 287.847150][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 287.847164][ C1] RSP: 002b:00007ffdb077f4e8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.847180][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa9d7fa7b29 [ 287.847192][ C1] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000004 [ 287.847201][ C1] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.847211][ C1] R10: 0000002000000400 R11: 0000000000000246 R12: 0000000000000001 [ 287.847222][ C1] R13: 00007ffdb077f708 R14: 00007ffdb077f510 R15: 00007ffdb077f500 [ 287.847242][ C1] [ 287.847249][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.148 msecs [ 287.862100][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.862122][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 287.862148][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.862162][ T31] Call Trace: [ 287.862172][ T31] [ 287.862182][ T31] dump_stack_lvl+0x99/0x250 [ 287.862223][ T31] ? __asan_memcpy+0x40/0x70 [ 287.862257][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.862293][ T31] ? __pfx__printk+0x10/0x10 [ 287.862332][ T31] panic+0x2db/0x790 [ 287.862379][ T31] ? __pfx_panic+0x10/0x10 [ 287.862410][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 287.862436][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 287.862463][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 287.862501][ T31] watchdog+0x102d/0x1030 [ 287.862535][ T31] ? watchdog+0x1de/0x1030 [ 287.862572][ T31] kthread+0x70e/0x8a0 [ 287.862600][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.862629][ T31] ? __pfx_kthread+0x10/0x10 [ 287.862655][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.862687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.862724][ T31] ? __pfx_kthread+0x10/0x10 [ 287.862750][ T31] ret_from_fork+0x3f9/0x770 [ 287.862784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.862819][ T31] ? __switch_to_asm+0x39/0x70 [ 287.862841][ T31] ? __switch_to_asm+0x33/0x70 [ 287.862862][ T31] ? __pfx_kthread+0x10/0x10 [ 287.862887][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.862925][ T31] [ 288.651235][ T31] Kernel Offset: disabled [ 288.655578][ T31] Rebooting in 86400 seconds..