ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor1031378717 <...> Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor1031378717", ["ci2-upstream-fs/syz-executor1031378717"], 0x7ffc44e4a140 /* 10 vars */) = 0 brk(NULL) = 0x555580420000 brk(0x555580420d80) = 0x555580420d80 arch_prctl(ARCH_SET_FS, 0x555580420400) = 0 set_tid_address(0x5555804206d0) = 5603 set_robust_list(0x5555804206e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor1031378717", 4096) = 44 getrandom("\x93\x7a\x0e\x25\xb6\x29\x06\xe2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555580420d80 brk(0x555580441d80) = 0x555580441d80 brk(0x555580442000) = 0x555580442000 mprotect(0x7f4fe85ab000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5604 attached , child_tidptr=0x5555804206d0) = 5604 [pid 5604] set_robust_list(0x5555804206e0, 24) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5604] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5604] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5605 attached [pid 5605] set_robust_list(0x5555804206e0, 24ci2-upstream-fs/strace-static-x86_64: Process 5606 attached [pid 5603] <... clone resumed>, child_tidptr=0x5555804206d0) = 5605 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] set_robust_list(0x5555804206e0, 24 [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] <... clone resumed>, child_tidptr=0x5555804206d0) = 5606 [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] <... rt_sigprocmask resumed>, [], 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5607 attached [pid 5603] <... clone resumed>, child_tidptr=0x5555804206d0) = 5607 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] set_robust_list(0x5555804206e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... set_robust_list resumed>) = 0 [pid 5606] <... prctl resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5608 attached [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] setpgid(0, 0 [pid 5608] set_robust_list(0x5555804206e0, 24 [pid 5606] <... setpgid resumed>) = 0 [pid 5605] <... clone resumed>, child_tidptr=0x5555804206d0) = 5608 [pid 5607] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5608] <... set_robust_list resumed>) = 0 executing program [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5608] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5608] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5607] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5608] setpgid(0, 0 [pid 5606] <... openat resumed>) = 3 [pid 5608] <... setpgid resumed>) = 0 [pid 5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5608] write(3, "1000", 4) = 4 [pid 5608] close(3) = 0 [pid 5608] write(1, "executing program\n", 18) = 18 [pid 5608] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC) = 3 [pid 5608] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC [pid 5606] write(3, "1000", 4ci2-upstream-fs/strace-static-x86_64: Process 5610 attached ci2-upstream-fs/strace-static-x86_64: Process 5609 attached ) = 4 [pid 5603] <... clone resumed>, child_tidptr=0x5555804206d0) = 5610 [pid 5610] set_robust_list(0x5555804206e0, 24 [pid 5609] set_robust_list(0x5555804206e0, 24 [pid 5608] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5607] <... clone resumed>, child_tidptr=0x5555804206d0) = 5609 [pid 5606] close(3 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... set_robust_list resumed>) = 0 [pid 5609] <... set_robust_list resumed>) = 0 [pid 5608] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5606] <... close resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] write(1, "executing program\n", 18 [pid 5603] <... rt_sigprocmask resumed>, [], 8) = 0 executing program [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5606] <... write resumed>) = 18 ci2-upstream-fs/strace-static-x86_64: Process 5611 attached [pid 5610] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5609] <... prctl resumed>) = 0 [pid 5606] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC [pid 5603] <... clone resumed>, child_tidptr=0x5555804206d0) = 5611 [pid 5611] set_robust_list(0x5555804206e0, 24 [pid 5610] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] setpgid(0, 0 [pid 5606] <... openat resumed>) = 3 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... set_robust_list resumed>) = 0 [pid 5609] <... setpgid resumed>) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5612 attached [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5606] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC [pid 5612] set_robust_list(0x5555804206e0, 24 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] <... clone resumed>, child_tidptr=0x5555804206d0) = 5612 [pid 5609] <... openat resumed>) = 3 [pid 5606] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5612] <... set_robust_list resumed>) = 0 [pid 5611] rt_sigprocmask(SIG_BLOCK, ~[] [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] write(3, "1000", 4 [pid 5606] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5612] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... write resumed>) = 4 [pid 5609] close(3 [pid 5611] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... close resumed>) = 0 [pid 5612] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] write(1, "executing program\n", 18) = 18 [pid 5609] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC) = 3 [pid 5609] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC) = -1 EFAULT (Bad address) executing program [pid 5609] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] setpgid(0, 0) = 0 [pid 5612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECci2-upstream-fs/strace-static-x86_64: Process 5613 attached [pid 5611] <... clone resumed>, child_tidptr=0x5555804206d0) = 5613 [pid 5613] set_robust_list(0x5555804206e0, 24 [pid 5612] <... openat resumed>) = 3 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5613] <... set_robust_list resumed>) = 0 [pid 5612] write(3, "1000", 4 [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5613] rt_sigprocmask(SIG_SETMASK, [] [pid 5612] <... write resumed>) = 4 [pid 5612] close(3 [pid 5613] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5612] <... close resumed>) = 0 [pid 5613] <... prctl resumed>) = 0 [pid 5612] write(1, "executing program\n", 18 executing program [pid 5613] setpgid(0, 0 [pid 5612] <... write resumed>) = 18 [pid 5613] <... setpgid resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC [pid 5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5612] <... openat resumed>) = 3 [pid 5612] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC [pid 5613] <... openat resumed>) = 3 [pid 5612] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5613] write(3, "1000", 4 [pid 5612] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5613] <... write resumed>) = 4 [pid 5613] close(3) = 0 executing program [pid 5613] write(1, "executing program\n", 18) = 18 [pid 5613] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC) = 3 [pid 5613] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC) = -1 EFAULT (Bad address) [pid 5613] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5604] kill(-5606, SIGKILL) = 0 [pid 5604] kill(5606, SIGKILL) = 0 [pid 5605] kill(-5608, SIGKILL) = 0 [pid 5605] kill(5608, SIGKILL) = 0 [pid 5607] kill(-5609, SIGKILL) = 0 [pid 5607] kill(5609, SIGKILL) = 0 [pid 5611] kill(-5613, SIGKILL) = 0 [pid 5611] kill(5613, SIGKILL [pid 5610] kill(-5612, SIGKILL [pid 5611] <... kill resumed>) = 0 [pid 5610] <... kill resumed>) = 0 [pid 5610] kill(5612, SIGKILL) = 0 [ 86.726646][ T1258] cfg80211: failed to load regulatory.db [pid 5604] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5604] getdents64(3, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5604] getdents64(3, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5604] close(3) = 0 [pid 5607] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5605] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5607] <... openat resumed>) = 3 [pid 5605] fstat(3 [pid 5611] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] fstat(3 [pid 5605] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5611] <... openat resumed>) = 3 [pid 5605] getdents64(3 [pid 5607] <... fstat resumed>, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5605] <... getdents64 resumed>, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5607] getdents64(3 [pid 5605] getdents64(3 [pid 5611] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5605] <... getdents64 resumed>, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5605] close(3 [pid 5607] <... getdents64 resumed>, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5611] getdents64(3 [pid 5607] getdents64(3 [pid 5610] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5610] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5610] getdents64(3 [pid 5605] <... close resumed>) = 0 [pid 5607] <... getdents64 resumed>, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5611] <... getdents64 resumed>, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5607] close(3 [pid 5610] <... getdents64 resumed>, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5607] <... close resumed>) = 0 [pid 5611] getdents64(3 [pid 5610] getdents64(3, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5610] close(3 [pid 5611] <... getdents64 resumed>, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5610] <... close resumed>) = 0 [pid 5611] close(3) = 0 [pid 5608] <... fallocate resumed>) = ? [pid 5608] +++ killed by SIGKILL +++ [pid 5605] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5608, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=11703 /* 117.03 s */} --- [pid 5605] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5605] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5649 attached [pid 5649] set_robust_list(0x5555804206e0, 24 [pid 5605] <... clone resumed>, child_tidptr=0x5555804206d0) = 5649 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] write(1, "executing program\n", 18) = 18 executing program [pid 5649] openat(AT_FDCWD, "/dev/nullb0", O_RDWR|O_NOCTTY|O_NONBLOCK|O_SYNC|O_NOATIME|O_CLOEXEC|FASYNC) = 3 [pid 5649] openat(AT_FDCWD, NULL, O_RDWR|O_NOATIME|FASYNC) = -1 EFAULT (Bad address) [pid 5649] fallocate(3, FALLOC_FL_KEEP_SIZE|FALLOC_FL_ZERO_RANGE, 1536, 281474977218560 [pid 5605] kill(-5649, SIGKILL) = 0 [pid 5605] kill(5649, SIGKILL) = 0 [pid 5605] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5605] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5605] getdents64(3, 0x555580421790 /* 2 entries */, 32768) = 48 [pid 5605] getdents64(3, 0x555580421790 /* 0 entries */, 32768) = 0 [pid 5605] close(3) = 0 [ 286.405021][ T38] INFO: task syz-executor103:5609 blocked for more than 143 seconds. [ 286.405081][ T38] Not tainted syzkaller #0 [ 286.405091][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.405101][ T38] task:syz-executor103 state:D stack:28264 pid:5609 tgid:5609 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 286.405165][ T38] Call Trace: [ 286.405173][ T38] [ 286.405194][ T38] __schedule+0x16d9/0x5700 [ 286.405305][ T38] ? __pfx___schedule+0x10/0x10 [ 286.405354][ T38] rt_mutex_schedule+0x76/0xf0 [ 286.405379][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 286.405414][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 286.405441][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 286.405477][ T38] ? rcu_is_watching+0x16/0xb0 [ 286.405503][ T38] rt_mutex_slowlock+0xbd/0x180 [ 286.405532][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 286.405562][ T38] ? lock_acquire+0x115/0x350 [ 286.405592][ T38] rwbase_write_lock+0x14c/0x720 [ 286.405629][ T38] blkdev_fallocate+0x263/0x550 [ 286.405656][ T38] ? fsnotify_file_area_perm+0x12a/0x1e0 [ 286.405698][ T38] vfs_fallocate+0x663/0x7f0 [ 286.405728][ T38] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.405763][ T38] __x64_sys_fallocate+0xbf/0x110 [ 286.405791][ T38] do_syscall_64+0x166/0x520 [ 286.405814][ T38] ? trace_irq_disable+0x3b/0x140 [ 286.405837][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.405857][ T38] ? clear_bhb_loop+0x70/0xc0 [ 286.405880][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.405898][ T38] RIP: 0033:0x7f4fe8518579 [ 286.405921][ T38] RSP: 002b:00007ffc79102648 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.405941][ T38] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fe8518579 [ 286.405954][ T38] RDX: 0000000000000600 RSI: 0000000000000011 RDI: 0000000000000003 [ 286.405966][ T38] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.405978][ T38] R10: 000100000007c000 R11: 0000000000000246 R12: 00007ffc791027c8 [ 286.405991][ T38] R13: 0000000000000002 R14: 00007ffc79102670 R15: 00007ffc79102660 [ 286.406022][ T38] [ 286.406032][ T38] INFO: task syz-executor103:5612 blocked for more than 143 seconds. [ 286.406047][ T38] Not tainted syzkaller #0 [ 286.406056][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.406065][ T38] task:syz-executor103 state:D stack:28264 pid:5612 tgid:5612 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 286.406112][ T38] Call Trace: [ 286.406119][ T38] [ 286.406130][ T38] __schedule+0x16d9/0x5700 [ 286.406179][ T38] ? __pfx___schedule+0x10/0x10 [ 286.406220][ T38] rt_mutex_schedule+0x76/0xf0 [ 286.406244][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 286.406277][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 286.406305][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 286.406348][ T38] ? rcu_is_watching+0x16/0xb0 [ 286.406373][ T38] rt_mutex_slowlock+0xbd/0x180 [ 286.406403][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 286.406433][ T38] ? lock_acquire+0x115/0x350 [ 286.406462][ T38] rwbase_write_lock+0x14c/0x720 [ 286.406498][ T38] blkdev_fallocate+0x263/0x550 [ 286.406525][ T38] ? fsnotify_file_area_perm+0x12a/0x1e0 [ 286.406553][ T38] vfs_fallocate+0x663/0x7f0 [ 286.406583][ T38] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.406617][ T38] __x64_sys_fallocate+0xbf/0x110 [ 286.406645][ T38] do_syscall_64+0x166/0x520 [ 286.406691][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.406710][ T38] ? clear_bhb_loop+0x70/0xc0 [ 286.406734][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.406752][ T38] RIP: 0033:0x7f4fe8518579 [ 286.406769][ T38] RSP: 002b:00007ffc79102648 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.406787][ T38] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fe8518579 [ 286.406800][ T38] RDX: 0000000000000600 RSI: 0000000000000011 RDI: 0000000000000003 [ 286.406811][ T38] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.406823][ T38] R10: 000100000007c000 R11: 0000000000000246 R12: 00007ffc791027c8 [ 286.406836][ T38] R13: 0000000000000002 R14: 00007ffc79102670 R15: 00007ffc79102660 [ 286.406867][ T38] [ 286.406875][ T38] INFO: task syz-executor103:5613 blocked for more than 143 seconds. [ 286.406889][ T38] Not tainted syzkaller #0 [ 286.406898][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.406907][ T38] task:syz-executor103 state:D stack:28264 pid:5613 tgid:5613 ppid:5611 task_flags:0x400040 flags:0x00080002 [ 286.406955][ T38] Call Trace: [ 286.406961][ T38] [ 286.406973][ T38] __schedule+0x16d9/0x5700 [ 286.407024][ T38] ? __pfx___schedule+0x10/0x10 [ 286.407065][ T38] rt_mutex_schedule+0x76/0xf0 [ 286.407087][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 286.407121][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 286.407149][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 286.407185][ T38] ? rcu_is_watching+0x16/0xb0 [ 286.407210][ T38] rt_mutex_slowlock+0xbd/0x180 [ 286.407240][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 286.407270][ T38] ? lock_acquire+0x115/0x350 [ 286.407300][ T38] rwbase_write_lock+0x14c/0x720 [ 286.407342][ T38] blkdev_fallocate+0x263/0x550 [ 286.407368][ T38] ? fsnotify_file_area_perm+0x12a/0x1e0 [ 286.407397][ T38] vfs_fallocate+0x663/0x7f0 [ 286.407427][ T38] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.407463][ T38] __x64_sys_fallocate+0xbf/0x110 [ 286.407489][ T38] do_syscall_64+0x166/0x520 [ 286.407512][ T38] ? trace_irq_disable+0x3b/0x140 [ 286.407534][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.407553][ T38] ? clear_bhb_loop+0x70/0xc0 [ 286.407576][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.407594][ T38] RIP: 0033:0x7f4fe8518579 [ 286.407609][ T38] RSP: 002b:00007ffc79102648 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.407627][ T38] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fe8518579 [ 286.407640][ T38] RDX: 0000000000000600 RSI: 0000000000000011 RDI: 0000000000000003 [ 286.407652][ T38] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.407663][ T38] R10: 000100000007c000 R11: 0000000000000246 R12: 00007ffc791027c8 [ 286.407676][ T38] R13: 0000000000000002 R14: 00007ffc79102670 R15: 00007ffc79102660 [ 286.407706][ T38] [ 286.407721][ T38] [ 286.407721][ T38] Showing all locks held in the system: [ 286.407732][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 286.407745][ T38] #0: ffffffff8f1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.407818][ T38] locks held by getty/5348: 2, on CPU#0: [ 286.407831][ T38] #0: ffff8880373280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.407880][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 286.407926][ T38] locks held by syz-executor103/5606: 3, last CPU#0: [ 286.407939][ T38] #0: ffff88802770f348 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 286.407993][ T38] #1: ffff88802770f518 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x294/0x550 [ 286.408042][ T38] #2: ffffffff8f1c3d80 (rcu_read_lock_sched){....}-{1:2}, at: submit_bio_noacct_nocheck+0x34e/0xa40 [ 286.408090][ T38] locks held by syz-executor103/5609: 1, on CPU#1: [ 286.408103][ T38] #0: ffff88802770f348 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 286.408156][ T38] locks held by syz-executor103/5612: 1, on CPU#0: [ 286.408169][ T38] #0: ffff88802770f348 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 286.408221][ T38] locks held by syz-executor103/5613: 1, on CPU#0: [ 286.408234][ T38] #0: ffff88802770f348 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 286.408286][ T38] locks held by syz-executor103/5649: 1, on CPU#1: [ 286.408299][ T38] #0: ffff88802770f348 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 286.408358][ T38] [ 286.408363][ T38] ============================================= [ 286.408363][ T38] [ 286.408381][ T38] NMI backtrace for cpu 1 [ 286.408408][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.408457][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.408481][ T38] Call Trace: [ 286.408497][ T38] [ 286.408513][ T38] dump_stack_lvl+0xe8/0x150 [ 286.408579][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 286.408627][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.408648][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 286.408672][ T38] sys_info+0x135/0x170 [ 286.408690][ T38] watchdog+0xfd7/0x1030 [ 286.408721][ T38] ? watchdog+0x1c7/0x1030 [ 286.408750][ T38] kthread+0x38b/0x470 [ 286.408770][ T38] ? __pfx_watchdog+0x10/0x10 [ 286.408790][ T38] ? __pfx_kthread+0x10/0x10 [ 286.408810][ T38] ret_from_fork+0x514/0xb70 [ 286.408832][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 286.408851][ T38] ? __switch_to+0xc89/0x1420 [ 286.408878][ T38] ? __pfx_kthread+0x10/0x10 [ 286.408898][ T38] ret_from_fork_asm+0x1a/0x30 [ 286.408930][ T38] [ 286.408942][ T38] Sending NMI from CPU 1 to CPUs 0: [ 286.408968][ C0] NMI backtrace for cpu 0 [ 286.408981][ C0] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.409000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.409010][ C0] RIP: 0010:__lock_acquire+0xb06/0x2de0 [ 286.409035][ C0] Code: c7 c6 a2 08 9e 8d 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 76 1d 00 00 49 8b 45 20 25 ff 1f 00 00 48 0f a3 05 6a eb 09 13 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 90 04 4d 94 eb 32 83 3d 71 7b [ 286.409050][ C0] RSP: 0018:ffffc90004a97848 EFLAGS: 00000003 [ 286.409065][ C0] RAX: 0000000000000029 RBX: 000000005ebe65aa RCX: 00000000b617acdb [ 286.409077][ C0] RDX: 0000000039efcf56 RSI: 0000000024f8480b RDI: ffff888027ca1f40 [ 286.409089][ C0] RBP: 529a4b6b00000000 R08: ffffffff84aa5d65 R09: 0000000000000000 [ 286.409101][ C0] R10: dffffc0000000000 R11: fffff9400005bd41 R12: 0000000000004000 [ 286.409113][ C0] R13: ffff888027ca2ba8 R14: ffff888027ca2ba8 R15: 0000000000000002 [ 286.409125][ C0] FS: 0000555580420400(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 286.409140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.409152][ C0] CR2: 00007f4fe8557070 CR3: 000000003bd18000 CR4: 00000000003526f0 [ 286.409168][ C0] Call Trace: [ 286.409174][ C0] [ 286.409185][ C0] ? __pfx___schedule+0x10/0x10 [ 286.409211][ C0] lock_acquire+0x115/0x350 [ 286.409232][ C0] ? pfn_valid+0x125/0x4c0 [ 286.409257][ C0] ? pfn_valid+0x125/0x4c0 [ 286.409279][ C0] ? pfn_valid+0x125/0x4c0 [ 286.409302][ C0] pfn_valid+0x141/0x4c0 [ 286.409324][ C0] ? pfn_valid+0x125/0x4c0 [ 286.409347][ C0] bvec_try_merge_page+0xc2/0x280 [ 286.409374][ C0] bio_add_page+0x2eb/0x700 [ 286.409403][ C0] bio_add_folio+0x64/0x90 [ 286.409427][ C0] __blkdev_issue_zero_pages+0x2c4/0x3d0 [ 286.409455][ C0] blkdev_issue_zeroout+0x48e/0x600 [ 286.409482][ C0] ? __pfx_blkdev_issue_zeroout+0x10/0x10 [ 286.409508][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.409529][ C0] ? truncate_bdev_range+0xed/0x100 [ 286.409548][ C0] ? truncate_bdev_range+0xed/0x100 [ 286.409566][ C0] blkdev_fallocate+0x472/0x550 [ 286.409590][ C0] vfs_fallocate+0x663/0x7f0 [ 286.409615][ C0] ? __pfx_vfs_fallocate+0x10/0x10 [ 286.409642][ C0] __x64_sys_fallocate+0xbf/0x110 [ 286.409666][ C0] do_syscall_64+0x166/0x520 [ 286.409689][ C0] ? trace_irq_disable+0x3b/0x140 [ 286.409723][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.409740][ C0] ? clear_bhb_loop+0x70/0xc0 [ 286.409759][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.409775][ C0] RIP: 0033:0x7f4fe8518579 [ 286.409790][ C0] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 286.409804][ C0] RSP: 002b:00007ffc79102648 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 286.409825][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4fe8518579 [ 286.409837][ C0] RDX: 0000000000000600 RSI: 0000000000000011 RDI: 0000000000000003 [ 286.409847][ C0] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009 [ 286.409858][ C0] R10: 000100000007c000 R11: 0000000000000246 R12: 00007ffc791027c8 [ 286.409870][ C0] R13: 0000000000000002 R14: 00007ffc79102670 R15: 00007ffc79102660 [ 286.409889][ C0] [ 286.409971][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 287.625731][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.635346][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.645409][ T38] Call Trace: [ 287.648713][ T38] [ 287.651784][ T38] vpanic+0x56d/0xa60 [ 287.655821][ T38] ? __pfx_vpanic+0x10/0x10 [ 287.660343][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 287.665882][ T38] panic+0xc5/0xd0 [ 287.669603][ T38] ? __pfx_panic+0x10/0x10 [ 287.674022][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 287.679129][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 287.685285][ T38] watchdog+0x1030/0x1030 [ 287.689627][ T38] ? watchdog+0x1c7/0x1030 [ 287.694039][ T38] kthread+0x38b/0x470 [ 287.698096][ T38] ? __pfx_watchdog+0x10/0x10 [ 287.702759][ T38] ? __pfx_kthread+0x10/0x10 [ 287.707328][ T38] ret_from_fork+0x514/0xb70 [ 287.711904][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 287.716990][ T38] ? __switch_to+0xc89/0x1420 [ 287.721651][ T38] ? __pfx_kthread+0x10/0x10 [ 287.726219][ T38] ret_from_fork_asm+0x1a/0x30 [ 287.730999][ T38] [ 287.734282][ T38] Kernel Offset: disabled [ 287.738595][ T38] Rebooting in 86400 seconds..