./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3898711337 <...> Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. execve("./syz-executor3898711337", ["./syz-executor3898711337"], 0x7ffddb444f60 /* 10 vars */) = 0 brk(NULL) = 0x5555919f2000 brk(0x5555919f2d00) = 0x5555919f2d00 arch_prctl(ARCH_SET_FS, 0x5555919f2380) = 0 set_tid_address(0x5555919f2650) = 5847 set_robust_list(0x5555919f2660, 24) = 0 rseq(0x5555919f2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3898711337", 4096) = 28 getrandom("\xff\x38\x0a\xe2\xc1\xf7\x6c\xbb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555919f2d00 brk(0x555591a13d00) = 0x555591a13d00 brk(0x555591a14000) = 0x555591a14000 mprotect(0x7fb46b7c0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.7syk6B", 0700) = 0 chmod("./syzkaller.7syk6B", 0777) = 0 chdir("./syzkaller.7syk6B") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached [pid 5848] set_robust_list(0x5555919f2660, 24) = 0 [pid 5848] chdir("./0" [pid 5847] <... clone resumed>, child_tidptr=0x5555919f2650) = 5848 [pid 5848] <... chdir resumed>) = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5848] write(1, "executing program\n", 18) = 18 [pid 5848] memfd_create("syzkaller", 0) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb463200000 [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5848] munmap(0x7fb463200000, 138412032) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] mkdir("./file0", 0777) = 0 [ 372.562665][ T5848] loop0: detected capacity change from 0 to 32768 [ 372.644429][ T5848] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 372.659935][ T5848] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 372.681694][ T5848] bcachefs (loop0): accounting_read... done [ 372.688600][ T5848] bcachefs (loop0): alloc_read... done [ 372.694123][ T5848] bcachefs (loop0): stripes_read... done [ 372.699988][ T5848] bcachefs (loop0): snapshots_read... done [ 372.709003][ T5848] bcachefs (loop0): journal_replay... done [ 372.714955][ T5848] bcachefs (loop0): resume_logged_ops... done [ 372.721493][ T5848] bcachefs (loop0): delete_dead_inodes... done [ 372.731588][ T5848] bcachefs (loop0): going read-write [pid 5848] mount("/dev/loop0", "./file0", "bcachefs", MS_NOSUID|MS_I_VERSION|MS_LAZYTIME, "\xf5\xab\x36\x78\xb9\x9e\x86\x5d\xe2\xfe\x7c\xaf\x3a\x94\xe1\x43\xee\x83\xff\x51\x2f\xf9\x65\xd0\xcd\xd5\xfd\x11\x46") = 0 [pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] chdir("./file0") = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_CLR_FD) = 0 [pid 5848] close(4) = 0 [pid 5848] exit_group(0) = ? [pid 5848] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=26 /* 0.26 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 372.741208][ T5848] bcachefs (loop0): done starting filesystem [ 372.743159][ T68] bcachefs (loop0 inum 4099 offset 0): data data checksum error, type chacha20_poly1305_80: got f437669dd16385080c9b should be 7179c5105bb769ac71e3 [ 372.762737][ T68] bcachefs (loop0 inum 4099 offset 0): no device to read from: no_device_to_read_from [ 372.762737][ T68] u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 e371:ac69b75b10c57971 compress incompressible ptr: 0:34:0 gen 0 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555919f36f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 372.883871][ T5847] bcachefs (loop0): shutting down [ 372.889197][ T5847] bcachefs (loop0): going read-only [ 372.894598][ T5847] bcachefs (loop0): finished waiting for writes to stop [ 403.217375][ T5858] Allocator stuck? Waited for 30 seconds [ 403.217392][ T5858] Allocator debug: [ 403.217399][ T5858] capacity1536 [ 403.217406][ T5858] reserved 31232 [ 403.217414][ T5858] hidden 0 [ 403.217422][ T5858] btree 0 [ 403.217436][ T5858] data 0 [ 403.217444][ T5858] cached 0 [ 403.217451][ T5858] reserved 0 [ 403.217459][ T5858] online_reserved 24 [ 403.217466][ T5858] nr_inodes 0 [ 403.217473][ T5858] [ 403.217480][ T5858] freelist_wait waiting [ 403.217488][ T5858] open buckets allocated1 [ 403.217495][ T5858] open buckets total 1024 [ 403.217502][ T5858] open_buckets_wait empty [ 403.217510][ T5858] open_buckets_btree 0 [ 403.217517][ T5858] open_buckets_user 0 [ 403.217525][ T5858] btree reserve cache 0 [ 403.217532][ T5858] [ 403.217538][ T5858] Dev 0: [ 403.217545][ T5858] buckets sectors fragmented [ 403.217554][ T5858] free 0 0 0 [ 403.217563][ T5858] sb 0 0 0 [ 403.217571][ T5858] journal 0 0 0 [ 403.217580][ T5858] btree 0 0 0 [ 403.217589][ T5858] user 0 0 0 [ 403.217598][ T5858] cached 0 0 0 [ 403.217606][ T5858] parity 0 0 0 [ 403.217615][ T5858] stripe 0 0 0 [ 403.217624][ T5858] need_gc_gens 0 0 0 [ 403.217632][ T5858] need_discard 0 0 0 [ 403.217641][ T5858] unstriped 0 0 0 [ 403.217650][ T5858] capacity 128 [ 403.217657][ T5858] [ 403.217664][ T5858] reserves: [ 403.217671][ T5858] stripe 60 [ 403.217678][ T5858] normal 58 [ 403.217686][ T5858] copygc 56 [ 403.217693][ T5858] btree 28 [ 403.217700][ T5858] btree_copygc 0 [ 403.217708][ T5858] reclaim 0 [ 403.217715][ T5858] interior_updates 0 [ 403.217723][ T5858] [ 403.217729][ T5858] open buckets 0 [ 403.217737][ T5858] buckets to invalidate 0 [ 403.217744][ T5858] [ 403.217751][ T5858] Copygc debug: [ 403.217758][ T5858] running: 0 [ 403.217764][ T5858] copygc_wait:0 [ 403.217771][ T5858] copygc_wait_at:0 [ 403.217779][ T5858] Currently waiting for:0 B [ 403.217786][ T5858] Currently waiting since:640 KiB [ 403.217794][ T5858] Currently calculated wait:0 B [ 403.217801][ T5858] [ 403.217808][ T5858] Journal debug: [ 403.217815][ T5858] flags: replay_done,running,may_skip_flush,need_flush_write [ 403.217824][ T5858] dirty journal entries: 0/32768 [ 403.217832][ T5858] seq: 13 [ 403.217839][ T5858] seq_ondisk: 13 [ 403.217847][ T5858] last_seq: 14 [ 403.217855][ T5858] last_seq_ondisk: 14 [ 403.217862][ T5858] flushed_seq_ondisk: 13 [ 403.217870][ T5858] watermark: stripe [ 403.217877][ T5858] each entry reserved: 321 [ 403.217885][ T5858] nr flush writes: 0 [ 403.217892][ T5858] nr noflush writes: 0 [ 403.217900][ T5858] average write size: 0 B [ 403.217907][ T5858] nr direct reclaim: 0 [ 403.217915][ T5858] nr background reclaim: 0 [ 403.217922][ T5858] reclaim kicked: 0 [ 403.217930][ T5858] reclaim runs in: 0 ms [ 403.217937][ T5858] blocked: 0 [ 403.217945][ T5858] current entry sectors: 256 [ 403.217952][ T5858] current entry error: ok [ 403.217960][ T5858] current entry: closed [ 403.217968][ T5858] unwritten entries: [ 403.217975][ T5858] last buf closed [ 403.217982][ T5858] space: [ 403.217989][ T5858] discarded 256:1792 [ 403.217996][ T5858] clean ondisk 256:1792 [ 403.218004][ T5858] clean 256:1792 [ 403.218012][ T5858] total 256:2048 [ 403.218020][ T5858] dev 0: [ 403.218026][ T5858] nr 8 [ 403.218034][ T5858] bucket size 256 [ 403.218041][ T5858] available 6:256 [ 403.218049][ T5858] discard_idx 0 [ 403.218057][ T5858] dirty_ondisk 0 (seq 0) [ 403.218064][ T5858] dirty_idx 0 (seq 0) [ 403.218072][ T5858] cur_idx 0 (seq 0) [ 403.218080][ T5858] [ 573.446707][ T31] INFO: task syz-executor389:5847 blocked for more than 143 seconds. [ 573.454944][ T31] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 573.462699][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.471451][ T31] task:syz-executor389 state:D stack:23840 pid:5847 tgid:5847 ppid:5844 flags:0x00004002 [ 573.481856][ T31] Call Trace: [ 573.485174][ T31] [ 573.488168][ T31] __schedule+0x17fb/0x4be0 [ 573.492728][ T31] ? __pfx___schedule+0x10/0x10 [ 573.497724][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.502795][ T31] ? schedule+0x90/0x320 [ 573.507133][ T31] schedule+0x14b/0x320 [ 573.511329][ T31] schedule_timeout+0xb0/0x290 [ 573.516103][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 573.521666][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.527742][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.533046][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.538478][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.543723][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.549008][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.554337][ T31] wait_for_completion+0x355/0x620 [ 573.559615][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 573.565310][ T31] ? synchronize_rcu+0x11b/0x360 [ 573.570331][ T31] ? kthread_unpark+0xd0/0x290 [ 573.575125][ T31] kthread_stop+0x19e/0x640 [ 573.579770][ T31] bch2_copygc_stop+0x4f/0x150 [ 573.584583][ T31] __bch2_fs_read_only+0x47/0x450 [ 573.589689][ T31] bch2_fs_read_only+0xb57/0x1200 [ 573.594759][ T31] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 573.600391][ T31] ? __bch2_print+0x17a/0x220 [ 573.605121][ T31] ? down_write+0x18c/0x220 [ 573.609734][ T31] ? __pfx_down_write+0x10/0x10 [ 573.614652][ T31] ? hook_sb_delete+0xaa0/0xbd0 [ 573.619681][ T31] __bch2_fs_stop+0x105/0x5c0 [ 573.624403][ T31] ? __pfx___bch2_fs_stop+0x10/0x10 [ 573.629687][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 573.634748][ T31] ? bch2_sync_fs+0x155/0x300 [ 573.639610][ T31] ? __pfx_bch2_put_super+0x10/0x10 [ 573.644853][ T31] generic_shutdown_super+0x139/0x2d0 [ 573.650308][ T31] bch2_kill_sb+0x41/0x50 [ 573.654678][ T31] deactivate_locked_super+0xc4/0x130 [ 573.660214][ T31] cleanup_mnt+0x41f/0x4b0 [ 573.664668][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.669976][ T31] task_work_run+0x24f/0x310 [ 573.674634][ T31] ? __pfx_task_work_run+0x10/0x10 [ 573.679917][ T31] ? path_umount+0x211/0xf80 [ 573.684571][ T31] ptrace_notify+0x2d2/0x380 [ 573.689272][ T31] ? user_path_at+0x44/0x60 [ 573.693819][ T31] ? __pfx_ptrace_notify+0x10/0x10 [ 573.699084][ T31] ? kmem_cache_free+0x195/0x410 [ 573.704072][ T31] ? __x64_sys_umount+0x123/0x170 [ 573.709180][ T31] syscall_exit_work+0xc7/0x1d0 [ 573.714067][ T31] syscall_exit_to_user_mode+0x24a/0x340 [ 573.719857][ T31] do_syscall_64+0x100/0x230 [ 573.724492][ T31] ? clear_bhb_loop+0x35/0x90 [ 573.729282][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.735247][ T31] RIP: 0033:0x7fb46b73e347 [ 573.739879][ T31] RSP: 002b:00007ffd96472d38 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 573.748410][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb46b73e347 [ 573.756531][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd96472df0 [ 573.764538][ T31] RBP: 00007ffd96472df0 R08: 0000000000000000 R09: 0000000000000000 [ 573.772643][ T31] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd96473e50 [ 573.780748][ T31] R13: 00005555919f36c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 573.788819][ T31] [ 573.791888][ T31] INFO: task bch-copygc/loop:5858 blocked for more than 143 seconds. [ 573.800100][ T31] Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 573.807795][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.816552][ T31] task:bch-copygc/loop state:D stack:18128 pid:5858 tgid:5858 ppid:2 flags:0x00024000 [ 573.826845][ T31] Call Trace: [ 573.830147][ T31] [ 573.833125][ T31] __schedule+0x17fb/0x4be0 [ 573.837751][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.843811][ T31] ? __pfx___schedule+0x10/0x10 [ 573.848750][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.853817][ T31] ? bch2_print_allocator_stuck+0x165/0xcb0 [ 573.859814][ T31] ? bch2_print_allocator_stuck+0xc24/0xcb0 [ 573.865749][ T31] ? schedule+0x90/0x320 [ 573.870135][ T31] schedule+0x14b/0x320 [ 573.874345][ T31] __closure_sync+0x259/0x2f0 [ 573.879129][ T31] ? __closure_sync+0x149/0x2f0 [ 573.884027][ T31] ? __pfx___closure_sync+0x10/0x10 [ 573.889353][ T31] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 573.895109][ T31] __bch2_write+0x562a/0x5dd0 [ 573.899910][ T31] ? __pfx_validate_chain+0x10/0x10 [ 573.905185][ T31] ? __pfx___bch2_write+0x10/0x10 [ 573.910314][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.916330][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.922788][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 573.928763][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.934005][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 573.940004][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 573.946441][ T31] ? stack_depot_save_flags+0x7b4/0x940 [ 573.952047][ T31] bch2_write+0x9b5/0x1760 [ 573.956582][ T31] ? __pfx_bch2_write+0x10/0x10 [ 573.961469][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.967509][ T31] ? bch2_data_update_read_done+0xfd/0x330 [ 573.973353][ T31] bch2_data_update_read_done+0x22e/0x330 [ 573.979170][ T31] ? __pfx_bch2_data_update_read_done+0x10/0x10 [ 573.985452][ T31] ? bch2_trans_srcu_unlock+0x57/0x5c0 [ 573.991008][ T31] bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0 [ 573.997567][ T31] ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10 [ 574.004569][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 574.010540][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.016999][ T31] ? finish_wait+0xd4/0x1e0 [ 574.021563][ T31] move_buckets_wait+0x2ba/0x1290 [ 574.026701][ T31] ? __pfx_move_buckets_wait+0x10/0x10 [ 574.032200][ T31] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 574.038023][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 574.044127][ T31] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 574.049944][ T31] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 574.055661][ T31] bch2_copygc_thread+0x83f/0xc10 [ 574.060799][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 574.066442][ T31] ? bch2_copygc_thread+0x1a1/0xc10 [ 574.071700][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 574.077703][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 574.082951][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 574.088945][ T31] ? __kthread_parkme+0x169/0x1d0 [ 574.094002][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 574.099640][ T31] kthread+0x2f0/0x390 [ 574.103745][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 574.109464][ T31] ? __pfx_kthread+0x10/0x10 [ 574.114089][ T31] ret_from_fork+0x4b/0x80 [ 574.118590][ T31] ? __pfx_kthread+0x10/0x10 [ 574.123218][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.128100][ T31] [ 574.131202][ T31] [ 574.131202][ T31] Showing all locks held in the system: [ 574.139079][ T31] 1 lock held by khungtaskd/31: [ 574.144007][ T31] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 574.154041][ T31] 5 locks held by kworker/u8:4/68: [ 574.159247][ T31] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 574.169425][ T31] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 574.180993][ T31] #2: ffffffff9a5914a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x158/0x390 [ 574.191634][ T31] #3: ffffffff9a6413b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 574.202270][ T31] #4: ffffffff8e7e7e28 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 574.212874][ T31] 2 locks held by getty/5570: [ 574.217632][ T31] #0: ffff88803183b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.227481][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 574.237707][ T31] 2 locks held by syz-executor389/5847: [ 574.243274][ T31] #0: ffff8880718f40e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 574.253774][ T31] #1: ffff888076200278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 574.263333][ T31] [ 574.265680][ T31] ============================================= [ 574.265680][ T31] [ 574.274246][ T31] NMI backtrace for cpu 0 [ 574.278610][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 574.289130][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 574.299197][ T31] Call Trace: [ 574.302482][ T31] [ 574.305425][ T31] dump_stack_lvl+0x241/0x360 [ 574.310124][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.315341][ T31] ? __pfx__printk+0x10/0x10 [ 574.319977][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 574.324936][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.330411][ T31] ? _printk+0xd5/0x120 [ 574.334583][ T31] ? __pfx__printk+0x10/0x10 [ 574.339185][ T31] ? __wake_up_klogd+0xcc/0x110 [ 574.344060][ T31] ? __pfx__printk+0x10/0x10 [ 574.348664][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 574.353707][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.359801][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 574.365804][ T31] watchdog+0xff6/0x1040 [ 574.370082][ T31] ? watchdog+0x1ea/0x1040 [ 574.374527][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.379229][ T31] kthread+0x2f0/0x390 [ 574.383325][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.388018][ T31] ? __pfx_kthread+0x10/0x10 [ 574.392624][ T31] ret_from_fork+0x4b/0x80 [ 574.397049][ T31] ? __pfx_kthread+0x10/0x10 [ 574.401649][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.406447][ T31] [ 574.409611][ T31] Sending NMI from CPU 0 to CPUs 1: [ 574.414878][ C1] NMI backtrace for cpu 1 [ 574.414895][ C1] CPU: 1 UID: 0 PID: 68 Comm: kworker/u8:4 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 574.414916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 574.414927][ C1] Workqueue: events_unbound toggle_allocation_gate [ 574.414961][ C1] RIP: 0010:do_sync_core+0x49/0x50 [ 574.414988][ C1] Code: e8 cc ca 5f 00 0f 01 e8 c3 cc cc cc cc f3 0f 1e fa e8 bb ca 5f 00 8c d0 50 54 48 83 04 24 08 9c 8c c8 50 68 79 a7 3f 81 48 cf cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 574.415002][ C1] RSP: 0018:ffffc9000216f6d8 EFLAGS: 00000086 [ 574.415017][ C1] RAX: 0000000000000010 RBX: ffffffff813fa730 RCX: ffff88801c79da00 [ 574.415030][ C1] RDX: 0000000000000000 RSI: ffffffff8c5f0240 RDI: 0000000000000000 [ 574.415042][ C1] RBP: ffffc9000216f8e0 R08: ffffffff81938cc5 R09: 1ffffffff2031136 [ 574.415056][ C1] R10: dffffc0000000000 R11: ffffffff813fa730 R12: dffffc0000000000 [ 574.415069][ C1] R13: ffff8880b873f940 R14: 0000000000000200 R15: 0000000000000001 [ 574.415081][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 574.415096][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.415109][ C1] CR2: 000055d694c7e680 CR3: 000000000e736000 CR4: 00000000003526f0 [ 574.415125][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.415135][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.415146][ C1] Call Trace: [ 574.415153][ C1] [ 574.415160][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 574.415184][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 574.415205][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.415227][ C1] ? nmi_handle+0x2a/0x5a0 [ 574.415261][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 574.415287][ C1] ? nmi_handle+0x14f/0x5a0 [ 574.415306][ C1] ? nmi_handle+0x2a/0x5a0 [ 574.415326][ C1] ? do_sync_core+0x49/0x50 [ 574.415348][ C1] ? default_do_nmi+0x63/0x160 [ 574.415369][ C1] ? exc_nmi+0x123/0x1f0 [ 574.415397][ C1] ? end_repeat_nmi+0xf/0x53 [ 574.415416][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 574.415438][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 574.415460][ C1] ? smp_call_function_many_cond+0x1705/0x2c60 [ 574.415486][ C1] ? do_sync_core+0x49/0x50 [ 574.415509][ C1] ? do_sync_core+0x49/0x50 [ 574.415532][ C1] ? do_sync_core+0x49/0x50 [ 574.415554][ C1] [ 574.415560][ C1] [ 574.415565][ C1] smp_call_function_many_cond+0x1760/0x2c60 [ 574.415594][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 574.415621][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 574.415650][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 574.415674][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 574.415702][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 574.415728][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 574.415752][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 574.415776][ C1] text_poke_bp_batch+0x726/0xb30 [ 574.415804][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 574.415823][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 574.415850][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 574.415878][ C1] ? process_scheduled_works+0x976/0x1840 [ 574.415906][ C1] text_poke_finish+0x30/0x50 [ 574.415928][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 574.415956][ C1] static_key_disable_cpuslocked+0xd2/0x1c0 [ 574.415983][ C1] static_key_disable+0x1a/0x20 [ 574.416006][ C1] toggle_allocation_gate+0x1bf/0x260 [ 574.416032][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 574.416059][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.416084][ C1] process_scheduled_works+0xa66/0x1840 [ 574.416125][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.416157][ C1] ? assign_work+0x364/0x3d0 [ 574.416186][ C1] worker_thread+0x870/0xd30 [ 574.416207][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 574.416233][ C1] ? __kthread_parkme+0x169/0x1d0 [ 574.416252][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.416268][ C1] kthread+0x2f0/0x390 [ 574.416288][ C1] ? __pfx_worker_thread+0x10/0x10 [ 574.416304][ C1] ? __pfx_kthread+0x10/0x10 [ 574.416323][ C1] ret_from_fork+0x4b/0x80 [ 574.416339][ C1] ? __pfx_kthread+0x10/0x10 [ 574.416362][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.416397][ C1] [ 574.416405][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.527 msecs [ 574.416894][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 574.416911][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 574.416940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 574.416963][ T31] Call Trace: [ 574.416973][ T31] [ 574.416983][ T31] dump_stack_lvl+0x241/0x360 [ 574.417020][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.417053][ T31] ? __pfx__printk+0x10/0x10 [ 574.417080][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.417113][ T31] ? vscnprintf+0x5d/0x90 [ 574.417145][ T31] panic+0x349/0x880 [ 574.417175][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 574.417208][ T31] ? __pfx_panic+0x10/0x10 [ 574.417234][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 574.417269][ T31] ? __irq_work_queue_local+0x137/0x410 [ 574.417296][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 574.417323][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 574.417352][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 574.417386][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 574.417420][ T31] watchdog+0x1035/0x1040 [ 574.417448][ T31] ? watchdog+0x1ea/0x1040 [ 574.417480][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.417506][ T31] kthread+0x2f0/0x390 [ 574.417533][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.417558][ T31] ? __pfx_kthread+0x10/0x10 [ 574.417586][ T31] ret_from_fork+0x4b/0x80 [ 574.417608][ T31] ? __pfx_kthread+0x10/0x10 [ 574.417636][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.417684][ T31] [ 574.991459][ T31] Kernel Offset: disabled [ 574.995794][ T31] Rebooting in 86400 seconds..