./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1694215163 <...> Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. execve("./syz-executor1694215163", ["./syz-executor1694215163"], 0x7ffd87685510 /* 10 vars */) = 0 brk(NULL) = 0x55558fee8000 brk(0x55558fee8d00) = 0x55558fee8d00 arch_prctl(ARCH_SET_FS, 0x55558fee8380) = 0 set_tid_address(0x55558fee8650) = 5835 set_robust_list(0x55558fee8660, 24) = 0 rseq(0x55558fee8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1694215163", 4096) = 28 getrandom("\x8b\x77\xb7\x0d\x79\x4a\x83\xc4", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558fee8d00 brk(0x55558ff09d00) = 0x55558ff09d00 brk(0x55558ff0a000) = 0x55558ff0a000 mprotect(0x7fe255c57000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5836 attached , child_tidptr=0x55558fee8650) = 5836 [pid 5836] set_robust_list(0x55558fee8660, 24) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5837 attached [ 120.717896][ T29] audit: type=1400 audit(1739263419.631:88): avc: denied { execmem } for pid=5835 comm="syz-executor169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5835] <... clone resumed>, child_tidptr=0x55558fee8650) = 5837 ./strace-static-x86_64: Process 5838 attached [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5837] set_robust_list(0x55558fee8660, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55558fee8650) = 5838 [pid 5838] set_robust_list(0x55558fee8660, 24 [pid 5837] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5839 attached [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5840 attached [pid 5835] <... clone resumed>, child_tidptr=0x55558fee8650) = 5839 [pid 5839] set_robust_list(0x55558fee8660, 24 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5839] <... set_robust_list resumed>) = 0 [pid 5837] <... clone resumed>, child_tidptr=0x55558fee8650) = 5840 ./strace-static-x86_64: Process 5841 attached [pid 5840] set_robust_list(0x55558fee8660, 24 [pid 5839] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5838] <... openat resumed>) = 3 [pid 5835] <... clone resumed>, child_tidptr=0x55558fee8650) = 5841 [pid 5841] set_robust_list(0x55558fee8660, 24 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5835] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5841] <... set_robust_list resumed>) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5842 attached [pid 5841] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5840] <... prctl resumed>) = 0 [pid 5839] <... clone resumed>, child_tidptr=0x55558fee8650) = 5842 [pid 5840] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5843 attached [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5838] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5844 attached [pid 5838] close(3 [pid 5843] set_robust_list(0x55558fee8660, 24 [pid 5842] set_robust_list(0x55558fee8660, 24 [pid 5841] <... clone resumed>, child_tidptr=0x55558fee8650) = 5844 [pid 5840] <... openat resumed>) = 3 [pid 5835] <... clone resumed>, child_tidptr=0x55558fee8650) = 5843 [pid 5843] <... set_robust_list resumed>) = 0 [pid 5842] <... set_robust_list resumed>) = 0 [pid 5844] set_robust_list(0x55558fee8660, 24 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5840] write(3, "1000", 4 [pid 5838] <... close resumed>) = 0 [pid 5844] <... set_robust_list resumed>) = 0 [pid 5843] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5842] <... prctl resumed>) = 0 [pid 5840] <... write resumed>) = 4 [pid 5838] write(1, "executing program\n", 18executing program [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5842] setpgid(0, 0 [pid 5840] close(3 [pid 5838] <... write resumed>) = 18 executing program [pid 5844] <... prctl resumed>) = 0 [pid 5840] <... close resumed>) = 0 [pid 5838] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME./strace-static-x86_64: Process 5845 attached [pid 5844] setpgid(0, 0 [pid 5842] <... setpgid resumed>) = 0 [pid 5840] write(1, "executing program\n", 18 [pid 5845] set_robust_list(0x55558fee8660, 24 [pid 5844] <... setpgid resumed>) = 0 [pid 5843] <... clone resumed>, child_tidptr=0x55558fee8650) = 5845 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] <... write resumed>) = 18 [pid 5838] <... openat resumed>) = 3 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... openat resumed>) = 3 [pid 5840] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5838] dup(3 [pid 5840] <... openat resumed>) = 3 [pid 5838] <... dup resumed>) = 4 [pid 5844] <... openat resumed>) = 3 [pid 5845] <... prctl resumed>) = 0 [pid 5842] write(3, "1000", 4 [pid 5838] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400executing program [pid 5845] setpgid(0, 0 [pid 5842] <... write resumed>) = 4 [pid 5840] dup(3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] write(1, "executing program\n", 18) = 18 [pid 5844] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIMEexecuting program [pid 5845] <... setpgid resumed>) = 0 [pid 5844] <... openat resumed>) = 3 [pid 5842] close(3 [pid 5840] <... dup resumed>) = 4 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5842] <... close resumed>) = 0 [pid 5840] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400 [pid 5844] dup(3 [pid 5842] write(1, "executing program\n", 18 [pid 5845] <... openat resumed>) = 3 [pid 5844] <... dup resumed>) = 4 [pid 5842] <... write resumed>) = 18 [pid 5844] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400 [pid 5842] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIMEexecuting program [pid 5845] write(3, "1000", 4 [pid 5842] <... openat resumed>) = 3 [pid 5845] <... write resumed>) = 4 [pid 5842] dup(3 [pid 5845] close(3 [pid 5842] <... dup resumed>) = 4 [pid 5845] <... close resumed>) = 0 [pid 5842] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400 [pid 5845] write(1, "executing program\n", 18) = 18 [pid 5845] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5845] dup(3) = 4 [ 120.816953][ T29] audit: type=1400 audit(1739263419.731:89): avc: denied { read write } for pid=5838 comm="syz-executor169" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 120.841144][ T29] audit: type=1400 audit(1739263419.731:90): avc: denied { open } for pid=5838 comm="syz-executor169" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [pid 5845] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400 [pid 5836] kill(-5838, SIGKILL) = 0 [pid 5836] kill(5838, SIGKILL) = 0 [pid 5837] kill(-5840, SIGKILL) = 0 [pid 5837] kill(5840, SIGKILL) = 0 [pid 5843] kill(-5845, SIGKILL [pid 5839] kill(-5842, SIGKILL [pid 5843] <... kill resumed>) = 0 [pid 5839] <... kill resumed>) = 0 [pid 5843] kill(5845, SIGKILL [pid 5839] kill(5842, SIGKILL [pid 5843] <... kill resumed>) = 0 [pid 5839] <... kill resumed>) = 0 [pid 5841] kill(-5844, SIGKILL) = 0 [pid 5841] kill(5844, SIGKILL) = 0 [pid 5841] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5837] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5843] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5836] <... openat resumed>) = 3 [pid 5836] newfstatat(3, "", [pid 5837] <... openat resumed>) = 3 [pid 5843] <... openat resumed>) = 3 [pid 5837] newfstatat(3, "", [pid 5841] <... openat resumed>) = 3 [pid 5836] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5843] newfstatat(3, "", [pid 5837] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5843] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, [pid 5836] getdents64(3, [pid 5841] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5841] getdents64(3, 0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5843] getdents64(3, [pid 5837] <... getdents64 resumed>0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5836] <... getdents64 resumed>0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5841] getdents64(3, [pid 5837] getdents64(3, [pid 5841] <... getdents64 resumed>0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5843] <... getdents64 resumed>0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5841] close(3 [pid 5837] <... getdents64 resumed>0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5843] getdents64(3, [pid 5841] <... close resumed>) = 0 [pid 5837] close(3 [pid 5836] getdents64(3, [pid 5843] <... getdents64 resumed>0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5837] <... close resumed>) = 0 [pid 5843] close(3 [pid 5836] <... getdents64 resumed>0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5843] <... close resumed>) = 0 [pid 5839] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] close(3) = 0 [pid 5839] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5839] getdents64(3, 0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5839] getdents64(3, 0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5839] close(3) = 0 [pid 5838] <... fallocate resumed>) = ? [pid 5838] +++ killed by SIGKILL +++ [pid 5836] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5838, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=8009 /* 80.09 s */} --- [pid 5836] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached [pid 5852] set_robust_list(0x55558fee8660, 24) = 0 [pid 5836] <... clone resumed>, child_tidptr=0x55558fee8650) = 5852 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 executing program [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NONBLOCK|O_SYNC|O_LARGEFILE|O_NOATIME) = 3 [pid 5852] dup(3) = 4 [pid 5852] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 3072, 9007199271526400 [pid 5836] kill(-5852, SIGKILL) = 0 [pid 5836] kill(5852, SIGKILL) = 0 [pid 5836] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5836] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5836] getdents64(3, 0x55558fee96f0 /* 2 entries */, 32768) = 48 [pid 5836] getdents64(3, 0x55558fee96f0 /* 0 entries */, 32768) = 0 [pid 5836] close(3) = 0 [ 287.460719][ T30] INFO: task syz-executor169:5842 blocked for more than 143 seconds. [ 287.469948][ T30] Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 287.478209][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.487583][ T30] task:syz-executor169 state:D stack:27632 pid:5842 tgid:5842 ppid:5839 task_flags:0x400040 flags:0x00004006 [ 287.500348][ T30] Call Trace: [ 287.503662][ T30] [ 287.506616][ T30] __schedule+0xf43/0x5890 [ 287.511243][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 287.517272][ T30] ? mark_lock+0xb5/0xc60 [ 287.522406][ T30] ? __pfx_mark_lock+0x10/0x10 [ 287.527870][ T30] ? __pfx___schedule+0x10/0x10 [ 287.533533][ T30] ? schedule+0x298/0x350 [ 287.537895][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.543083][ T30] ? lock_acquire+0x2f/0xb0 [ 287.547614][ T30] ? schedule+0x1fd/0x350 [ 287.552036][ T30] schedule+0xe7/0x350 [ 287.556136][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.562326][ T30] rwsem_down_write_slowpath+0x539/0x12a0 [ 287.568783][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.575725][ T30] ? blkdev_fallocate+0x1da/0x390 [ 287.581565][ T30] ? lock_acquire+0x2f/0xb0 [ 287.586709][ T30] ? blkdev_fallocate+0x1da/0x390 [ 287.592624][ T30] down_write+0x1d8/0x200 [ 287.597578][ T30] ? __pfx_down_write+0x10/0x10 [ 287.603139][ T30] ? inode_security+0x101/0x130 [ 287.608038][ T30] blkdev_fallocate+0x1da/0x390 [ 287.612968][ T30] ? __pfx_blkdev_fallocate+0x10/0x10 [ 287.618352][ T30] vfs_fallocate+0x60d/0x10d0 [ 287.623098][ T30] ? __pfx_vfs_fallocate+0x10/0x10 [ 287.628219][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.633487][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.639235][ T30] __x64_sys_fallocate+0xd5/0x150 [ 287.645024][ T30] do_syscall_64+0xcd/0x250 [ 287.649559][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.656225][ T30] RIP: 0033:0x7fe255be4b29 [ 287.661343][ T30] RSP: 002b:00007ffed9ec9ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.670560][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe255be4b29 [ 287.679346][ T30] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.688008][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.696863][ T30] R10: 0020000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.704986][ T30] R13: 00007ffed9eca108 R14: 00007ffed9ec9f10 R15: 00007ffed9ec9f00 [ 287.713099][ T30] [ 287.716160][ T30] INFO: task syz-executor169:5844 blocked for more than 143 seconds. [ 287.725291][ T30] Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 287.733666][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.743103][ T30] task:syz-executor169 state:D stack:28368 pid:5844 tgid:5844 ppid:5841 task_flags:0x400040 flags:0x00004006 [ 287.755791][ T30] Call Trace: [ 287.759100][ T30] [ 287.762795][ T30] __schedule+0xf43/0x5890 [ 287.767941][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 287.773979][ T30] ? mark_lock+0xb5/0xc60 [ 287.779043][ T30] ? __pfx_mark_lock+0x10/0x10 [ 287.784602][ T30] ? __pfx___schedule+0x10/0x10 [ 287.789493][ T30] ? schedule+0x298/0x350 [ 287.793907][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.798971][ T30] ? lock_acquire+0x2f/0xb0 [ 287.803518][ T30] ? schedule+0x1fd/0x350 [ 287.807872][ T30] schedule+0xe7/0x350 [ 287.812665][ T30] schedule_preempt_disabled+0x13/0x30 [ 287.818877][ T30] rwsem_down_write_slowpath+0x539/0x12a0 [ 287.825367][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 287.832334][ T30] ? blkdev_fallocate+0x1da/0x390 [ 287.838048][ T30] ? lock_acquire+0x2f/0xb0 [ 287.843304][ T30] ? blkdev_fallocate+0x1da/0x390 [ 287.849066][ T30] down_write+0x1d8/0x200 [ 287.854185][ T30] ? __pfx_down_write+0x10/0x10 [ 287.859071][ T30] ? inode_security+0x101/0x130 [ 287.863984][ T30] blkdev_fallocate+0x1da/0x390 [ 287.868855][ T30] ? __pfx_blkdev_fallocate+0x10/0x10 [ 287.874307][ T30] vfs_fallocate+0x60d/0x10d0 [ 287.879005][ T30] ? __pfx_vfs_fallocate+0x10/0x10 [ 287.884171][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.889395][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.895331][ T30] __x64_sys_fallocate+0xd5/0x150 [ 287.901006][ T30] do_syscall_64+0xcd/0x250 [ 287.906190][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.912838][ T30] RIP: 0033:0x7fe255be4b29 [ 287.917909][ T30] RSP: 002b:00007ffed9ec9ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 287.927094][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe255be4b29 [ 287.935817][ T30] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 287.944712][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 287.952764][ T30] R10: 0020000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 287.960788][ T30] R13: 00007ffed9eca108 R14: 00007ffed9ec9f10 R15: 00007ffed9ec9f00 [ 287.968797][ T30] [ 287.972537][ T30] INFO: task syz-executor169:5845 blocked for more than 143 seconds. [ 287.983064][ T30] Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 287.991342][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.000661][ T30] task:syz-executor169 state:D stack:28368 pid:5845 tgid:5845 ppid:5843 task_flags:0x400040 flags:0x00004006 [ 288.013263][ T30] Call Trace: [ 288.016567][ T30] [ 288.020167][ T30] __schedule+0xf43/0x5890 [ 288.025254][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 288.031199][ T30] ? mark_lock+0xb5/0xc60 [ 288.035570][ T30] ? __pfx_mark_lock+0x10/0x10 [ 288.040400][ T30] ? __pfx___schedule+0x10/0x10 [ 288.045284][ T30] ? schedule+0x298/0x350 [ 288.049650][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.054787][ T30] ? lock_acquire+0x2f/0xb0 [ 288.059329][ T30] ? schedule+0x1fd/0x350 [ 288.063746][ T30] schedule+0xe7/0x350 [ 288.067833][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.073376][ T30] rwsem_down_write_slowpath+0x539/0x12a0 [ 288.079118][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 288.085345][ T30] ? blkdev_fallocate+0x1da/0x390 [ 288.090443][ T30] ? lock_acquire+0x2f/0xb0 [ 288.094963][ T30] ? blkdev_fallocate+0x1da/0x390 [ 288.100006][ T30] down_write+0x1d8/0x200 [ 288.104386][ T30] ? __pfx_down_write+0x10/0x10 [ 288.123130][ T30] ? inode_security+0x101/0x130 [ 288.128091][ T30] blkdev_fallocate+0x1da/0x390 [ 288.133107][ T30] ? __pfx_blkdev_fallocate+0x10/0x10 [ 288.138509][ T30] vfs_fallocate+0x60d/0x10d0 [ 288.143542][ T30] ? __pfx_vfs_fallocate+0x10/0x10 [ 288.148690][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.154699][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.160735][ T30] __x64_sys_fallocate+0xd5/0x150 [ 288.166498][ T30] do_syscall_64+0xcd/0x250 [ 288.171791][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.178382][ T30] RIP: 0033:0x7fe255be4b29 [ 288.183592][ T30] RSP: 002b:00007ffed9ec9ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 288.192757][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe255be4b29 [ 288.201573][ T30] RDX: 0000000000000c00 RSI: 0000000000000011 RDI: 0000000000000004 [ 288.209571][ T30] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 288.217636][ T30] R10: 0020000001002000 R11: 0000000000000246 R12: 0000000000000001 [ 288.226313][ T30] R13: 00007ffed9eca108 R14: 00007ffed9ec9f10 R15: 00007ffed9ec9f00 [ 288.235099][ T30] [ 288.238834][ T30] [ 288.238834][ T30] Showing all locks held in the system: [ 288.258317][ T30] 2 locks held by ksoftirqd/1/24: [ 288.263455][ T30] 1 lock held by khungtaskd/30: [ 288.268983][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 288.284806][ T30] 1 lock held by klogd/5182: [ 288.290115][ T30] 2 locks held by getty/5581: [ 288.294799][ T30] #0: ffff88803267d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 288.305224][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 288.315436][ T30] 1 lock held by syz-executor169/5840: [ 288.320929][ T30] 1 lock held by syz-executor169/5842: [ 288.326388][ T30] #0: ffff888023a78940 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1da/0x390 [ 288.337136][ T30] 1 lock held by syz-executor169/5844: [ 288.342647][ T30] #0: ffff888023a78940 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1da/0x390 [ 288.353398][ T30] 1 lock held by syz-executor169/5845: [ 288.358877][ T30] #0: ffff888023a78940 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1da/0x390 [ 288.369699][ T30] 1 lock held by syz-executor169/5852: [ 288.375265][ T30] #0: ffff888023a78940 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x1da/0x390 [ 288.386023][ T30] [ 288.388953][ T30] ============================================= [ 288.388953][ T30] [ 288.410153][ T30] NMI backtrace for cpu 0 [ 288.410182][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 288.410202][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.410212][ T30] Call Trace: [ 288.410219][ T30] [ 288.410226][ T30] dump_stack_lvl+0x116/0x1f0 [ 288.410283][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 288.410314][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.410361][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 288.410386][ T30] watchdog+0xf62/0x12b0 [ 288.410434][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.410453][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.410470][ T30] ? __kthread_parkme+0x148/0x220 [ 288.410497][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.410517][ T30] kthread+0x3af/0x750 [ 288.410538][ T30] ? __pfx_kthread+0x10/0x10 [ 288.410556][ T30] ? __pfx_kthread+0x10/0x10 [ 288.410573][ T30] ret_from_fork+0x45/0x80 [ 288.410606][ T30] ? __pfx_kthread+0x10/0x10 [ 288.410625][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.410670][ T30] [ 288.410676][ T30] Sending NMI from CPU 0 to CPUs 1: [ 288.523745][ C1] NMI backtrace for cpu 1 [ 288.523761][ C1] CPU: 1 UID: 0 PID: 5182 Comm: klogd Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 288.523777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.523785][ C1] RIP: 0010:memset_orig+0x30/0xb0 [ 288.523810][ C1] Code: fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 <48> ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 [ 288.523822][ C1] RSP: 0018:ffffc900034977f8 EFLAGS: 00000206 [ 288.523834][ C1] RAX: ffffffffffffffff RBX: ffffea0001413800 RCX: 000000000000003a [ 288.523842][ C1] RDX: 0000000000001000 RSI: 00000000000000ff RDI: ffffed100a09c180 [ 288.523851][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 288.523858][ C1] R10: ffffed100a09c000 R11: 0000000000000001 R12: 00000000000504e0 [ 288.523865][ C1] R13: 0000000000000008 R14: ffff8880504e0000 R15: 0000000000008000 [ 288.523873][ C1] FS: 00007fd9008ac500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 288.523886][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.523895][ C1] CR2: 00007f633a657580 CR3: 00000000366d0000 CR4: 00000000003526f0 [ 288.523902][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.523909][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.523921][ C1] Call Trace: [ 288.523926][ C1] [ 288.523931][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 288.523951][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 288.523970][ C1] ? nmi_handle+0x1ac/0x5d0 [ 288.524000][ C1] ? memset_orig+0x30/0xb0 [ 288.524013][ C1] ? default_do_nmi+0x6a/0x160 [ 288.524031][ C1] ? exc_nmi+0x170/0x1e0 [ 288.524046][ C1] ? end_repeat_nmi+0xf/0x53 [ 288.524071][ C1] ? memset_orig+0x30/0xb0 [ 288.524085][ C1] ? memset_orig+0x30/0xb0 [ 288.524099][ C1] ? memset_orig+0x30/0xb0 [ 288.524112][ C1] [ 288.524115][ C1] [ 288.524119][ C1] free_frozen_pages+0x298/0xfb0 [ 288.524150][ C1] qlist_free_all+0x4e/0x120 [ 288.524180][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 288.524199][ C1] __kasan_slab_alloc+0x69/0x90 [ 288.524211][ C1] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 288.524228][ C1] ? __alloc_skb+0x2b1/0x380 [ 288.524284][ C1] __alloc_skb+0x2b1/0x380 [ 288.524298][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 288.524312][ C1] ? find_held_lock+0x2d/0x110 [ 288.524332][ C1] alloc_skb_with_frags+0xe4/0x850 [ 288.524356][ C1] ? __pfx_lock_release+0x10/0x10 [ 288.524373][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 288.524388][ C1] sock_alloc_send_pskb+0x7f1/0x980 [ 288.524409][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 288.524423][ C1] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 288.524444][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 288.524463][ C1] unix_dgram_sendmsg+0x45e/0x18c0 [ 288.524509][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 288.524533][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 288.524550][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 288.524569][ C1] __sys_sendto+0x488/0x4f0 [ 288.524587][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 288.524604][ C1] ? rcu_is_watching+0x12/0xc0 [ 288.524624][ C1] ? xfd_validate_state+0x5d/0x180 [ 288.524645][ C1] ? rcu_is_watching+0x12/0xc0 [ 288.524658][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 288.524672][ C1] ? do_syscall_64+0x91/0x250 [ 288.524685][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.524698][ C1] do_syscall_64+0xcd/0x250 [ 288.524712][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.524728][ C1] RIP: 0033:0x7fd900a0e9b5 [ 288.524745][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 288.524756][ C1] RSP: 002b:00007ffca9ebfe38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 288.524771][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd900a0e9b5 [ 288.524779][ C1] RDX: 000000000000007b RSI: 0000561192e3efa0 RDI: 0000000000000003 [ 288.524787][ C1] RBP: 0000561192e392c0 R08: 0000000000000000 R09: 0000000000000000 [ 288.524795][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 288.524803][ C1] R13: 00007fd900b9c212 R14: 00007ffca9ebff38 R15: 0000000000000000 [ 288.524815][ C1] [ 288.524824][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.081 msecs [ 288.529905][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 288.967585][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 288.978066][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.988104][ T30] Call Trace: [ 288.991370][ T30] [ 288.994285][ T30] dump_stack_lvl+0x3d/0x1f0 [ 288.998870][ T30] panic+0x71d/0x800 [ 289.002767][ T30] ? __pfx_panic+0x10/0x10 [ 289.007164][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 289.012522][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.018489][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 289.023843][ T30] ? watchdog+0xdcc/0x12b0 [ 289.028246][ T30] ? watchdog+0xdbf/0x12b0 [ 289.032655][ T30] watchdog+0xddd/0x12b0 [ 289.036886][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.041546][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.046726][ T30] ? __kthread_parkme+0x148/0x220 [ 289.051731][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.056393][ T30] kthread+0x3af/0x750 [ 289.060447][ T30] ? __pfx_kthread+0x10/0x10 [ 289.065021][ T30] ? __pfx_kthread+0x10/0x10 [ 289.069592][ T30] ret_from_fork+0x45/0x80 [ 289.073995][ T30] ? __pfx_kthread+0x10/0x10 [ 289.078565][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.083317][ T30] [ 289.086529][ T30] Kernel Offset: disabled [ 289.090834][ T30] Rebooting in 86400 seconds..