./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4282353353 <...> Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. execve("./syz-executor4282353353", ["./syz-executor4282353353"], 0x7ffe046f4140 /* 10 vars */) = 0 brk(NULL) = 0x55558e766000 brk(0x55558e766d00) = 0x55558e766d00 arch_prctl(ARCH_SET_FS, 0x55558e766380) = 0 set_tid_address(0x55558e766650) = 5837 set_robust_list(0x55558e766660, 24) = 0 rseq(0x55558e766ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4282353353", 4096) = 28 getrandom("\x97\x16\x98\x6c\xbc\x84\x13\xd7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558e766d00 brk(0x55558e787d00) = 0x55558e787d00 brk(0x55558e788000) = 0x55558e788000 mprotect(0x7fc796968000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.Vm3CUL", 0700) = 0 chmod("./syzkaller.Vm3CUL", 0777) = 0 chdir("./syzkaller.Vm3CUL") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached [pid 5838] set_robust_list(0x55558e766660, 24 [pid 5837] <... clone resumed>, child_tidptr=0x55558e766650) = 5838 [pid 5838] <... set_robust_list resumed>) = 0 [pid 5838] chdir("./0") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5838] write(1, "executing program\n", 18executing program ) = 18 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc78e400000 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5838] munmap(0x7fc78e400000, 138412032) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5838] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5838] close(3) = 0 [pid 5838] close(4) = 0 [pid 5838] mkdir("./file0", 0777) = 0 [ 132.658354][ T5838] loop0: detected capacity change from 0 to 32768 [ 132.732459][ T5838] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 132.748532][ T5838] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 132.767722][ T5838] bcachefs (loop0): accounting_read... done [ 132.775049][ T5838] bcachefs (loop0): alloc_read... done [pid 5838] mount("/dev/loop0", "./file0", "bcachefs", 0, "\x10\xf7\xe7\xab\x27\x5e\x7b\x9e\xc1\x8a\x06\x63\x35\x54\xe2\xf6\xfa\xd2\xf9\xfb\xc1\x7a\x1b\x2f\xed\xc7\xf5\x95") = 0 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 132.780707][ T5838] bcachefs (loop0): stripes_read... done [ 132.786541][ T5838] bcachefs (loop0): snapshots_read... done [ 132.794762][ T5838] bcachefs (loop0): journal_replay... done [ 132.800743][ T5838] bcachefs (loop0): resume_logged_ops... done [ 132.806932][ T5838] bcachefs (loop0): delete_dead_inodes... done [ 132.815617][ T5838] bcachefs (loop0): going read-write [ 132.826735][ T5838] bcachefs (loop0): done starting filesystem [pid 5838] chdir("./file0") = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5838] ioctl(4, LOOP_CLR_FD) = 0 [pid 5838] close(4) = 0 [pid 5838] exit_group(0) = ? [pid 5838] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55558e7676f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 133.015455][ T5837] bcachefs (loop0): shutting down [ 133.020883][ T5837] bcachefs (loop0): going read-only [ 133.026759][ T5837] bcachefs (loop0): finished waiting for writes to stop [ 163.286575][ T5848] Allocator stuck? Waited for 30 seconds [ 163.286589][ T5848] Allocator debug: [ 163.286594][ T5848] capacity1536 [ 163.286599][ T5848] reserved 31232 [ 163.286604][ T5848] hidden 0 [ 163.286609][ T5848] btree 0 [ 163.286613][ T5848] data 0 [ 163.286618][ T5848] cached 0 [ 163.286623][ T5848] reserved 0 [ 163.286628][ T5848] online_reserved 24 [ 163.286632][ T5848] nr_inodes 0 [ 163.286637][ T5848] [ 163.286641][ T5848] freelist_wait waiting [ 163.286646][ T5848] open buckets allocated1 [ 163.286651][ T5848] open buckets total 1024 [ 163.286656][ T5848] open_buckets_wait empty [ 163.286661][ T5848] open_buckets_btree 0 [ 163.286665][ T5848] open_buckets_user 0 [ 163.286670][ T5848] btree reserve cache 0 [ 163.286675][ T5848] [ 163.286679][ T5848] Dev 0: [ 163.286683][ T5848] buckets sectors fragmented [ 163.286689][ T5848] free 0 0 0 [ 163.286694][ T5848] sb 0 0 0 [ 163.286700][ T5848] journal 0 0 0 [ 163.286705][ T5848] btree 0 0 0 [ 163.286711][ T5848] user 0 0 0 [ 163.286716][ T5848] cached 0 0 0 [ 163.286722][ T5848] parity 0 0 0 [ 163.286727][ T5848] stripe 0 0 0 [ 163.286733][ T5848] need_gc_gens 0 0 0 [ 163.286738][ T5848] need_discard 0 0 0 [ 163.286744][ T5848] unstriped 0 0 0 [ 163.286749][ T5848] capacity 128 [ 163.286754][ T5848] [ 163.286758][ T5848] reserves: [ 163.286762][ T5848] stripe 60 [ 163.286768][ T5848] normal 58 [ 163.286776][ T5848] copygc 56 [ 163.286781][ T5848] btree 28 [ 163.286786][ T5848] btree_copygc 0 [ 163.286790][ T5848] reclaim 0 [ 163.286795][ T5848] interior_updates 0 [ 163.286800][ T5848] [ 163.286804][ T5848] open buckets 0 [ 163.286809][ T5848] buckets to invalidate 0 [ 163.286814][ T5848] [ 163.286818][ T5848] Copygc debug: [ 163.286823][ T5848] running: 1 [ 163.286827][ T5848] copygc_wait:0 [ 163.286832][ T5848] copygc_wait_at:0 [ 163.286836][ T5848] Currently waiting for:0 B [ 163.286841][ T5848] Currently waiting since:640 KiB [ 163.286846][ T5848] Currently calculated wait:0 B [ 163.286851][ T5848] [ 163.286855][ T5848] Journal debug: [ 163.286859][ T5848] flags: replay_done,running,may_skip_flush,need_flush_write [ 163.286865][ T5848] dirty journal entries: 0/32768 [ 163.286872][ T5848] seq: 13 [ 163.286879][ T5848] seq_ondisk: 13 [ 163.286883][ T5848] last_seq: 14 [ 163.286888][ T5848] last_seq_ondisk: 14 [ 163.286893][ T5848] flushed_seq_ondisk: 13 [ 163.286898][ T5848] watermark: stripe [ 163.286902][ T5848] each entry reserved: 321 [ 163.286907][ T5848] nr flush writes: 0 [ 163.286912][ T5848] nr noflush writes: 0 [ 163.286917][ T5848] average write size: 0 B [ 163.286921][ T5848] nr direct reclaim: 0 [ 163.286926][ T5848] nr background reclaim: 0 [ 163.286931][ T5848] reclaim kicked: 0 [ 163.286936][ T5848] reclaim runs in: 0 ms [ 163.286941][ T5848] blocked: 0 [ 163.286946][ T5848] current entry sectors: 256 [ 163.286950][ T5848] current entry error: ok [ 163.286955][ T5848] current entry: closed [ 163.286960][ T5848] unwritten entries: [ 163.286965][ T5848] last buf closed [ 163.286969][ T5848] space: [ 163.286974][ T5848] discarded 256:1792 [ 163.286979][ T5848] clean ondisk 256:1792 [ 163.286984][ T5848] clean 256:1792 [ 163.286991][ T5848] total 256:2048 [ 163.286997][ T5848] dev 0: [ 163.287001][ T5848] nr 8 [ 163.287006][ T5848] bucket size 256 [ 163.287011][ T5848] available 6:256 [ 163.287016][ T5848] discard_idx 0 [ 163.287021][ T5848] dirty_ondisk 0 (seq 0) [ 163.287026][ T5848] dirty_idx 0 (seq 0) [ 163.287031][ T5848] cur_idx 0 (seq 0) [ 163.287036][ T5848] [ 286.797787][ T30] INFO: task syz-executor428:5837 blocked for more than 143 seconds. [ 286.806109][ T30] Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 286.813752][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.822756][ T30] task:syz-executor428 state:D stack:23840 pid:5837 tgid:5837 ppid:5834 flags:0x00004002 [ 286.833301][ T30] Call Trace: [ 286.836683][ T30] [ 286.839656][ T30] __schedule+0x17fb/0x4be0 [ 286.844190][ T30] ? __pfx___schedule+0x10/0x10 [ 286.849202][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.854254][ T30] ? schedule+0x90/0x320 [ 286.858548][ T30] schedule+0x14b/0x320 [ 286.862751][ T30] schedule_timeout+0xb0/0x290 [ 286.867566][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 286.872955][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.878984][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.884373][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.889738][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.894980][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.900316][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.905636][ T30] wait_for_completion+0x355/0x620 [ 286.910960][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 286.916773][ T30] ? synchronize_rcu+0x11b/0x360 [ 286.921728][ T30] ? kthread_unpark+0xd0/0x290 [ 286.926560][ T30] kthread_stop+0x19e/0x640 [ 286.931087][ T30] bch2_copygc_stop+0x4f/0x150 [ 286.936298][ T30] __bch2_fs_read_only+0x47/0x450 [ 286.941369][ T30] bch2_fs_read_only+0xb57/0x1200 [ 286.946499][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 286.952008][ T30] ? __bch2_print+0x17a/0x220 [ 286.956850][ T30] ? down_write+0x18c/0x220 [ 286.961386][ T30] ? __pfx_down_write+0x10/0x10 [ 286.966319][ T30] ? hook_sb_delete+0xaa0/0xbd0 [ 286.971197][ T30] __bch2_fs_stop+0x105/0x5c0 [ 286.975983][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 286.981294][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 286.986445][ T30] ? bch2_sync_fs+0x155/0x300 [ 286.991145][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 286.996423][ T30] generic_shutdown_super+0x139/0x2d0 [ 287.001828][ T30] bch2_kill_sb+0x41/0x50 [ 287.006286][ T30] deactivate_locked_super+0xc4/0x130 [ 287.011681][ T30] cleanup_mnt+0x41f/0x4b0 [ 287.016246][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.021506][ T30] task_work_run+0x24f/0x310 [ 287.026312][ T30] ? __pfx_task_work_run+0x10/0x10 [ 287.031466][ T30] ? path_umount+0x284/0xf70 [ 287.036167][ T30] ptrace_notify+0x2d2/0x380 [ 287.040781][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 287.045959][ T30] ? kmem_cache_free+0x195/0x410 [ 287.050932][ T30] ? __x64_sys_umount+0x123/0x170 [ 287.056066][ T30] syscall_exit_work+0xc7/0x1d0 [ 287.060988][ T30] syscall_exit_to_user_mode+0x24a/0x340 [ 287.066701][ T30] do_syscall_64+0x100/0x230 [ 287.071337][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.076117][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.082059][ T30] RIP: 0033:0x7fc7968e6347 [ 287.086564][ T30] RSP: 002b:00007ffd23fe5018 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 287.095355][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc7968e6347 [ 287.103494][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd23fe50d0 [ 287.111647][ T30] RBP: 00007ffd23fe50d0 R08: 0000000000000000 R09: 0000000000000000 [ 287.119699][ T30] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd23fe6130 [ 287.127739][ T30] R13: 000055558e7676c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 287.135746][ T30] [ 287.138968][ T30] [ 287.138968][ T30] Showing all locks held in the system: [ 287.146868][ T30] 1 lock held by khungtaskd/30: [ 287.151723][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 287.161722][ T30] 1 lock held by klogd/5184: [ 287.166371][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 287.176406][ T30] 2 locks held by getty/5573: [ 287.181117][ T30] #0: ffff8880319fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.190970][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 287.201225][ T30] 2 locks held by syz-executor428/5837: [ 287.206833][ T30] #0: ffff88807d0600e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 287.217358][ T30] #1: ffff888076280278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 287.226981][ T30] [ 287.229300][ T30] ============================================= [ 287.229300][ T30] [ 287.237937][ T30] NMI backtrace for cpu 0 [ 287.242301][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 287.252986][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.263032][ T30] Call Trace: [ 287.266303][ T30] [ 287.269232][ T30] dump_stack_lvl+0x241/0x360 [ 287.273905][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.279145][ T30] ? __pfx__printk+0x10/0x10 [ 287.283762][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.288706][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.294233][ T30] ? _printk+0xd5/0x120 [ 287.298409][ T30] ? __pfx__printk+0x10/0x10 [ 287.303007][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.307874][ T30] ? __pfx__printk+0x10/0x10 [ 287.312453][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.318481][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.324464][ T30] watchdog+0xff6/0x1040 [ 287.328751][ T30] ? watchdog+0x1ea/0x1040 [ 287.333162][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.337840][ T30] kthread+0x2f0/0x390 [ 287.341905][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.346655][ T30] ? __pfx_kthread+0x10/0x10 [ 287.351233][ T30] ret_from_fork+0x4b/0x80 [ 287.355673][ T30] ? __pfx_kthread+0x10/0x10 [ 287.360271][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.365043][ T30] [ 287.368255][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.373519][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 287.374500][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.389487][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 287.400013][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.410064][ T30] Call Trace: [ 287.413341][ T30] [ 287.416271][ T30] dump_stack_lvl+0x241/0x360 [ 287.420978][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.426247][ T30] ? __pfx__printk+0x10/0x10 [ 287.431128][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.437122][ T30] ? vscnprintf+0x5d/0x90 [ 287.441454][ T30] panic+0x349/0x880 [ 287.445347][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.451588][ T30] ? __pfx_panic+0x10/0x10 [ 287.456003][ T30] ? irq_work_queue+0xd1/0x150 [ 287.461204][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.467183][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.473280][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.479279][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.485443][ T30] watchdog+0x1035/0x1040 [ 287.489802][ T30] ? watchdog+0x1ea/0x1040 [ 287.494239][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.498919][ T30] kthread+0x2f0/0x390 [ 287.502990][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.507662][ T30] ? __pfx_kthread+0x10/0x10 [ 287.512262][ T30] ret_from_fork+0x4b/0x80 [ 287.516672][ T30] ? __pfx_kthread+0x10/0x10 [ 287.521271][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.526135][ T30] [ 287.529413][ T30] Kernel Offset: disabled [ 287.533734][ T30] Rebooting in 86400 seconds..