./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1829458793 <...> Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. execve("./syz-executor1829458793", ["./syz-executor1829458793"], 0x7fff3c342a00 /* 10 vars */) = 0 brk(NULL) = 0x555593017000 brk(0x555593017d00) = 0x555593017d00 arch_prctl(ARCH_SET_FS, 0x555593017380) = 0 set_tid_address(0x555593017650) = 5075 set_robust_list(0x555593017660, 24) = 0 rseq(0x555593017ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1829458793", 4096) = 28 getrandom("\xfd\xb8\x47\xba\xcc\xff\x10\xf6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555593017d00 brk(0x555593038d00) = 0x555593038d00 brk(0x555593039000) = 0x555593039000 mprotect(0x7fd7e79a6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached , child_tidptr=0x555593017650) = 5076 [pid 5076] set_robust_list(0x555593017660, 24) = 0 [pid 5076] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setsid() = 1 [pid 5076] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5076] unshare(CLONE_NEWNS) = 0 [pid 5076] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5076] unshare(CLONE_NEWIPC) = 0 [pid 5076] unshare(CLONE_NEWCGROUP) = 0 [pid 5076] unshare(CLONE_NEWUTS) = 0 [pid 5076] unshare(CLONE_SYSVSEM) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "16777216", 8) = 8 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "536870912", 9) = 9 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "8192", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5076] close(3) = 0 [pid 5076] getpid() = 1 [pid 5076] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5079] set_robust_list(0x555593017660, 24) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555593017650) = 2 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 executing program [pid 5079] write(1, "executing program\n", 18) = 18 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd7df400000 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5079] munmap(0x7fd7df400000, 138412032) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] close(4) = 0 [pid 5079] mkdir("./file0", 0777) = 0 [ 59.392724][ T5079] loop0: detected capacity change from 0 to 32768 [ 59.468851][ T5079] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 59.483283][ T5079] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 59.503424][ T5079] bcachefs (loop0): alloc_read... done [ 59.509202][ T5079] bcachefs (loop0): stripes_read... done [pid 5079] mount("/dev/loop0", "./file0", "bcachefs", MS_NODEV|MS_SYNCHRONOUS|MS_RELATIME|MS_STRICTATIME, "\xff\xff\xff\xff") = 0 [pid 5079] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file0") = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4) = 0 [pid 5079] chdir(NULL) = -1 EFAULT (Bad address) [pid 5079] creat("./bus", 000) = 4 [pid 5079] fcntl(4, F_SETFL, O_RDONLY|O_NOCTTY|O_DIRECT|FASYNC) = 0 [pid 5079] open(NULL, O_RDWR) = -1 EFAULT (Bad address) [ 59.514931][ T5079] bcachefs (loop0): snapshots_read... done [ 59.523423][ T5079] bcachefs (loop0): journal_replay... done [ 59.529273][ T5079] bcachefs (loop0): resume_logged_ops... done [ 59.535594][ T5079] bcachefs (loop0): going read-write [ 59.544201][ T5079] bcachefs (loop0): done starting filesystem [ 59.650776][ T12] bcachefs (loop0 inum 1073741825 offset 0): data data checksum error, type chacha20_poly1305_80: got c53487a6d4e9e4e726b0 should be 3f9e892ceabd1d47b0c2 [ 59.653793][ T51] bcachefs (loop0 inum 1073741827 offset 0): data data checksum error, type chacha20_poly1305_80: got 67679152beca53177f70 should be 9894d374992ac97ed273 [ 59.666929][ T12] bcachefs (loop0 inum 1073741825 offset 0): no device to read from [ 59.690837][ T51] bcachefs (loop0 inum 1073741827 offset 0): no device to read from [pid 5079] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] kill(-2, SIGKILL) = 0 [pid 5076] kill(2, SIGKILL) = 0 [pid 5076] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555930186f0 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, 0x5555930186f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [ 76.765043][ T58] cfg80211: failed to load regulatory.db [ 77.413918][ T5079] Allocator stuck? Waited for 10 seconds [ 77.413940][ T5079] Allocator debug: [ 77.413946][ T5079] hidden8448 [ 77.413951][ T5079] btree 2816 [ 77.413956][ T5079] data 6432 [ 77.413960][ T5079] cached 0 [ 77.413965][ T5079] reserved 0 [ 77.413970][ T5079] online_reserved 2040 [ 77.413975][ T5079] nr_inodes 9 [ 77.413980][ T5079] [ 77.413985][ T5079] freelist_wait waiting [ 77.413990][ T5079] open buckets allocated1 [ 77.413994][ T5079] open buckets total 1024 [ 77.413999][ T5079] open_buckets_wait empty [ 77.414004][ T5079] open_buckets_btree 0 [ 77.414009][ T5079] open_buckets_user 0 [ 77.414014][ T5079] btree reserve cache 0 [ 77.414019][ T5079] [ 77.414023][ T5079] Dev 0: [ 77.414028][ T5079] buckets sectors fragmented [ 77.414034][ T5079] free 58 0 0 [ 77.414039][ T5079] sb 25 6152 248 [ 77.414045][ T5079] journal 8 2048 0 [ 77.414051][ T5079] btree 11 2816 0 [ 77.414056][ T5079] user 26 6432 224 [ 77.414062][ T5079] cached 0 0 0 [ 77.414068][ T5079] parity 0 0 0 [ 77.414073][ T5079] stripe 0 0 0 [ 77.414079][ T5079] need_gc_gens 0 0 0 [ 77.414085][ T5079] need_discard 0 0 0 [ 77.414091][ T5079] [ 77.414095][ T5079] reserves: [ 77.414100][ T5079] stripe 60 [ 77.414105][ T5079] normal 58 [ 77.414110][ T5079] copygc 56 [ 77.414115][ T5079] btree 28 [ 77.414120][ T5079] btree_copygc 0 [ 77.414125][ T5079] reclaim 0 [ 77.414130][ T5079] interior_updates 0 [ 77.414135][ T5079] [ 77.414139][ T5079] open buckets 0 [ 77.414144][ T5079] buckets to invalidate 0 [ 77.414149][ T5079] [ 77.414153][ T5079] Copygc debug: [ 77.414158][ T5079] Currently waiting for: 0 B [ 77.414163][ T5079] Currently waiting since: 1.99 MiB [ 77.414169][ T5079] Currently calculated wait: 0 B [ 77.414173][ T5079] [ 77.414178][ T5079] Journal debug: [ 77.414182][ T5079] flags: replay_done,running,may_skip_flush [ 77.414188][ T5079] dirty journal entries:0/32768 [ 77.414193][ T5079] seq: 17 [ 77.414197][ T5079] seq_ondisk:17 [ 77.414202][ T5079] last_seq:18 [ 77.414207][ T5079] last_seq_ondisk:17 [ 77.414211][ T5079] flushed_seq_ondisk:17 [ 77.414216][ T5079] watermark:stripe [ 77.414221][ T5079] each entry reserved:361 [ 77.414226][ T5079] nr flush writes:7 [ 77.414230][ T5079] nr noflush writes:0 [ 77.414235][ T5079] average write size:5.51 KiB [ 77.414240][ T5079] nr direct reclaim:0 [ 77.414245][ T5079] nr background reclaim:67 [ 77.414250][ T5079] reclaim kicked:0 [ 77.414254][ T5079] reclaim runs in:0 ms [ 77.414259][ T5079] blocked: 0 [ 77.414264][ T5079] current entry sectors:256 [ 77.414269][ T5079] current entry error:ok [ 77.414274][ T5079] current entry:closed [ 77.414278][ T5079] unwritten entries: [ 77.414283][ T5079] last buf closed [ 77.414288][ T5079] space: [ 77.414292][ T5079] discarded256:1536 [ 77.414297][ T5079] clean ondisk256:1536 [ 77.414302][ T5079] clean 256:1536 [ 77.414306][ T5079] total 256:2048 [ 77.414311][ T5079] dev 0: [ 77.414316][ T5079] nr 8 [ 77.414320][ T5079] bucket size256 [ 77.414325][ T5079] available6:152 [ 77.414330][ T5079] discard_idx0 [ 77.414339][ T5079] dirty_ondisk0 (seq 17) [ 77.414344][ T5079] dirty_idx0 (seq 17) [ 77.414349][ T5079] cur_idx0 (seq 17) [ 77.414354][ T5079] [ 101.093496][ T5079] Allocator stuck? Waited for 10 seconds [ 101.093509][ T5079] Allocator debug: [ 101.093514][ T5079] hidden8448 [ 101.093519][ T5079] btree 2816 [ 101.093524][ T5079] data 6432 [ 101.093529][ T5079] cached 0 [ 101.093534][ T5079] reserved 0 [ 101.093539][ T5079] online_reserved 2040 [ 101.093544][ T5079] nr_inodes 9 [ 101.093548][ T5079] [ 101.093553][ T5079] freelist_wait waiting [ 101.093558][ T5079] open buckets allocated1 [ 101.093562][ T5079] open buckets total 1024 [ 101.093567][ T5079] open_buckets_wait empty [ 101.093572][ T5079] open_buckets_btree 0 [ 101.093579][ T5079] open_buckets_user 0 [ 101.093584][ T5079] btree reserve cache 0 [ 101.093589][ T5079] [ 101.093593][ T5079] Dev 0: [ 101.093598][ T5079] buckets sectors fragmented [ 101.093603][ T5079] free 58 0 0 [ 101.093609][ T5079] sb 25 6152 248 [ 101.093615][ T5079] journal 8 2048 0 [ 101.093620][ T5079] btree 11 2816 0 [ 101.093626][ T5079] user 26 6432 224 [ 101.093632][ T5079] cached 0 0 0 [ 101.093637][ T5079] parity 0 0 0 [ 101.093643][ T5079] stripe 0 0 0 [ 101.093649][ T5079] need_gc_gens 0 0 0 [ 101.093654][ T5079] need_discard 0 0 0 [ 101.093660][ T5079] [ 101.093664][ T5079] reserves: [ 101.093669][ T5079] stripe 60 [ 101.093674][ T5079] normal 58 [ 101.093679][ T5079] copygc 56 [ 101.093684][ T5079] btree 28 [ 101.093689][ T5079] btree_copygc 0 [ 101.093694][ T5079] reclaim 0 [ 101.093699][ T5079] interior_updates 0 [ 101.093704][ T5079] [ 101.093708][ T5079] open buckets 0 [ 101.093713][ T5079] buckets to invalidate 0 [ 101.093718][ T5079] [ 101.093722][ T5079] Copygc debug: [ 101.093727][ T5079] Currently waiting for: 0 B [ 101.093732][ T5079] Currently waiting since: 1.99 MiB [ 101.093737][ T5079] Currently calculated wait: 0 B [ 101.093742][ T5079] [ 101.093746][ T5079] Journal debug: [ 101.093751][ T5079] flags: replay_done,running,may_skip_flush [ 101.093756][ T5079] dirty journal entries:0/32768 [ 101.093761][ T5079] seq: 18 [ 101.093766][ T5079] seq_ondisk:18 [ 101.093770][ T5079] last_seq:19 [ 101.093775][ T5079] last_seq_ondisk:18 [ 101.093780][ T5079] flushed_seq_ondisk:18 [ 101.093784][ T5079] watermark:stripe [ 101.093789][ T5079] each entry reserved:361 [ 101.093794][ T5079] nr flush writes:8 [ 101.093798][ T5079] nr noflush writes:0 [ 101.093803][ T5079] average write size:5.04 KiB [ 101.093808][ T5079] nr direct reclaim:0 [ 101.093813][ T5079] nr background reclaim:69 [ 101.093818][ T5079] reclaim kicked:0 [ 101.093822][ T5079] reclaim runs in:0 ms [ 101.093834][ T5079] blocked: 0 [ 101.093839][ T5079] current entry sectors:256 [ 101.093844][ T5079] current entry error:ok [ 101.093849][ T5079] current entry:closed [ 101.093853][ T5079] unwritten entries: [ 101.093858][ T5079] last buf closed [ 101.093863][ T5079] space: [ 101.093867][ T5079] discarded256:1536 [ 101.093872][ T5079] clean ondisk256:1536 [ 101.093876][ T5079] clean 256:1536 [ 101.093881][ T5079] total 256:2048 [ 101.093886][ T5079] dev 0: [ 101.093890][ T5079] nr 8 [ 101.093895][ T5079] bucket size256 [ 101.093900][ T5079] available6:144 [ 101.093904][ T5079] discard_idx0 [ 101.093909][ T5079] dirty_ondisk0 (seq 18) [ 101.093914][ T5079] dirty_idx0 (seq 18) [ 101.093919][ T5079] cur_idx0 (seq 18) [ 101.093923][ T5079] [ 286.683979][ T30] INFO: task syz-executor182:5079 blocked for more than 143 seconds. [ 286.692160][ T30] Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 286.699856][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.708625][ T30] task:syz-executor182 state:D stack:12912 pid:5079 tgid:5079 ppid:5076 flags:0x00004006 [ 286.718878][ T30] Call Trace: [ 286.722172][ T30] [ 286.725199][ T30] __schedule+0x1796/0x49d0 [ 286.729741][ T30] ? __pfx___schedule+0x10/0x10 [ 286.734695][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.739729][ T30] ? bch2_print_allocator_stuck+0x143/0xc80 [ 286.745788][ T30] ? bch2_printbuf_exit+0x6d/0xa0 [ 286.750828][ T30] ? bch2_print_allocator_stuck+0x143/0xc80 [ 286.756839][ T30] ? bch2_printbuf_exit+0x6d/0xa0 [ 286.761875][ T30] ? schedule+0x90/0x320 [ 286.766181][ T30] schedule+0x14b/0x320 [ 286.770350][ T30] __closure_sync+0x259/0x2f0 [ 286.775061][ T30] ? __closure_sync+0x149/0x2f0 [ 286.779919][ T30] ? __pfx___closure_sync+0x10/0x10 [ 286.785198][ T30] __bch2_write+0x54a5/0x5c40 [ 286.789913][ T30] ? __pfx___bch2_write+0x10/0x10 [ 286.794977][ T30] ? ttwu_queue_wakelist+0x286/0x3b0 [ 286.800303][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.805389][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.810600][ T30] bch2_write+0x947/0x1670 [ 286.815057][ T30] ? __pfx_bch2_write+0x10/0x10 [ 286.819913][ T30] ? bio_uninit+0x2b0/0x3b0 [ 286.824467][ T30] ? iov_iter_revert+0x1c8/0x390 [ 286.829412][ T30] ? bch2_direct_write+0x1160/0x3050 [ 286.834771][ T30] bch2_direct_write+0x1a52/0x3050 [ 286.839977][ T30] ? __pfx_bch2_direct_write+0x10/0x10 [ 286.845623][ T30] bch2_write_iter+0x206/0x2840 [ 286.850508][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 286.855638][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 286.860941][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 286.866457][ T30] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 286.872365][ T30] vfs_write+0xa72/0xc90 [ 286.876648][ T30] ? __pfx_bch2_write_iter+0x10/0x10 [ 286.881950][ T30] ? __pfx_vfs_write+0x10/0x10 [ 286.888637][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.893895][ T30] ksys_write+0x1a0/0x2c0 [ 286.898220][ T30] ? __pfx_ksys_write+0x10/0x10 [ 286.903125][ T30] ? do_syscall_64+0x100/0x230 [ 286.907899][ T30] do_syscall_64+0xf3/0x230 [ 286.912385][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.917087][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.922994][ T30] RIP: 0033:0x7fd7e7920e39 [ 286.927460][ T30] RSP: 002b:00007ffd2b7caa58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 286.935904][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd7e7920e39 [ 286.943921][ T30] RDX: 00000000175d9003 RSI: 0000000020000200 RDI: 0000000000000004 [ 286.951891][ T30] RBP: 0000000000000000 R08: 0000555500000000 R09: 0000555500000000 [ 286.959894][ T30] R10: 0000555500000000 R11: 0000000000000246 R12: 00000000000f4240 [ 286.967950][ T30] R13: 00007ffd2b7cacc8 R14: 0000000000000001 R15: 00007ffd2b7caa90 [ 286.975976][ T30] [ 286.979073][ T30] [ 286.979073][ T30] Showing all locks held in the system: [ 286.986873][ T30] 1 lock held by khungtaskd/30: [ 286.991727][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 287.001647][ T30] 2 locks held by getty/4827: [ 287.006374][ T30] #0: ffff88802ac1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.016146][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 287.026303][ T30] 2 locks held by syz-executor182/5079: [ 287.031825][ T30] #0: ffff8880242f0420 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 287.040734][ T30] #1: ffff88807a6f08b8 (&sb->s_type->i_mutex_key#16){+.+.}-{3:3}, at: bch2_direct_write+0x243/0x3050 [ 287.051763][ T30] [ 287.054104][ T30] ============================================= [ 287.054104][ T30] [ 287.062511][ T30] NMI backtrace for cpu 1 [ 287.066818][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 287.076688][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.086717][ T30] Call Trace: [ 287.089976][ T30] [ 287.092888][ T30] dump_stack_lvl+0x241/0x360 [ 287.097549][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.102725][ T30] ? __pfx__printk+0x10/0x10 [ 287.107290][ T30] ? vprintk_emit+0x631/0x770 [ 287.111946][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.116952][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.121873][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.127310][ T30] ? _printk+0xd5/0x120 [ 287.131442][ T30] ? __pfx__printk+0x10/0x10 [ 287.136010][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.140850][ T30] ? __pfx__printk+0x10/0x10 [ 287.145420][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.151377][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.157337][ T30] watchdog+0xfde/0x1020 [ 287.161558][ T30] ? watchdog+0x1ea/0x1020 [ 287.165953][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.170606][ T30] kthread+0x2f0/0x390 [ 287.174652][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.179305][ T30] ? __pfx_kthread+0x10/0x10 [ 287.183872][ T30] ret_from_fork+0x4b/0x80 [ 287.188266][ T30] ? __pfx_kthread+0x10/0x10 [ 287.192837][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.197589][ T30] [ 287.200704][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.205973][ C0] NMI backtrace for cpu 0 [ 287.205985][ C0] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 287.206001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.206011][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.206031][ C0] RIP: 0010:kasan_report+0x15e/0x180 [ 287.206048][ C0] Code: 89 df e8 05 f7 ff ff 48 89 df e8 ed f7 ff ff 40 0f b6 d5 48 8d 7c 24 08 4c 89 e6 e8 3c fd ff ff b0 01 4c 89 2c 24 ff 34 24 9d <48> 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 31 c0 eb [ 287.206059][ C0] RSP: 0018:ffffc90000ab7620 EFLAGS: 00000082 [ 287.206072][ C0] RAX: 0000000000000000 RBX: ffff88801b2cbc00 RCX: ffffffff813523e5 [ 287.206088][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00002aaaaaaab0e2 [ 287.206098][ C0] RBP: 0000000000000000 R08: 00002aaaaaaab0e3 R09: fffff52000156f42 [ 287.206108][ C0] R10: dffffc0000000000 R11: fffff52000156f42 R12: 0000000000000001 [ 287.206118][ C0] R13: 0000000000000082 R14: ffffc90000ab7a10 R15: 00002aaaaaaab0e2 [ 287.206129][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 287.206142][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.206152][ C0] CR2: 00005599a7c1d680 CR3: 0000000015078000 CR4: 00000000003506f0 [ 287.206166][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.206175][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.206184][ C0] Call Trace: [ 287.206190][ C0] [ 287.206196][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.206216][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.206234][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.206252][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.206280][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.206296][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.206315][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.206335][ C0] ? kasan_report+0x15e/0x180 [ 287.206349][ C0] ? default_do_nmi+0x63/0x160 [ 287.206369][ C0] ? exc_nmi+0x123/0x1f0 [ 287.206387][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.206408][ C0] ? text_poke_memcpy+0x25/0x30 [ 287.206423][ C0] ? kasan_report+0x15e/0x180 [ 287.206438][ C0] ? kasan_report+0x15e/0x180 [ 287.206453][ C0] ? kasan_report+0x15e/0x180 [ 287.206468][ C0] [ 287.206473][ C0] [ 287.206483][ C0] ? text_poke_memcpy+0x25/0x30 [ 287.206498][ C0] kasan_check_range+0x282/0x290 [ 287.206513][ C0] ? text_poke_memcpy+0x25/0x30 [ 287.206528][ C0] __asan_memcpy+0x40/0x70 [ 287.206547][ C0] text_poke_memcpy+0x25/0x30 [ 287.206563][ C0] __text_poke+0x786/0xd30 [ 287.206579][ C0] ? kmalloc_node_track_caller_noprof+0xf2/0x440 [ 287.206598][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 287.206614][ C0] ? __pfx___text_poke+0x10/0x10 [ 287.206628][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 287.206647][ C0] ? perf_event_text_poke+0x258/0x330 [ 287.206666][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 287.206686][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 287.206703][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 287.206721][ C0] ? __pfx___might_resched+0x10/0x10 [ 287.206745][ C0] text_poke_bp_batch+0x8cd/0xb30 [ 287.206766][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x770 [ 287.206784][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 287.206803][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 287.206825][ C0] text_poke_finish+0x30/0x50 [ 287.206840][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 287.206857][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 287.206879][ C0] static_key_enable+0x1a/0x20 [ 287.206898][ C0] toggle_allocation_gate+0xb5/0x250 [ 287.206913][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 287.206928][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.206950][ C0] ? process_scheduled_works+0x945/0x1830 [ 287.206964][ C0] process_scheduled_works+0xa2c/0x1830 [ 287.206992][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.207012][ C0] ? assign_work+0x364/0x3d0 [ 287.207028][ C0] worker_thread+0x86d/0xd70 [ 287.207048][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.207068][ C0] ? __kthread_parkme+0x169/0x1d0 [ 287.207091][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.207106][ C0] kthread+0x2f0/0x390 [ 287.207122][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.207137][ C0] ? __pfx_kthread+0x10/0x10 [ 287.207153][ C0] ret_from_fork+0x4b/0x80 [ 287.207171][ C0] ? __pfx_kthread+0x10/0x10 [ 287.207187][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.207213][ C0] [ 287.207219][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.245 msecs [ 287.207972][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.207983][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 287.208001][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 287.208010][ T30] Call Trace: [ 287.208017][ T30] [ 287.208024][ T30] dump_stack_lvl+0x241/0x360 [ 287.208049][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.208069][ T30] ? __pfx__printk+0x10/0x10 [ 287.208085][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.208109][ T30] ? vscnprintf+0x5d/0x90 [ 287.208132][ T30] panic+0x349/0x860 [ 287.208152][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.208176][ T30] ? __pfx_panic+0x10/0x10 [ 287.208192][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.208215][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.208236][ T30] ? irq_work_queue+0xca/0x150 [ 287.208252][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.208272][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.208290][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.208308][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.208333][ T30] watchdog+0x101d/0x1020 [ 287.208353][ T30] ? watchdog+0x1ea/0x1020 [ 287.208376][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.208393][ T30] kthread+0x2f0/0x390 [ 287.208413][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.208429][ T30] ? __pfx_kthread+0x10/0x10 [ 287.208449][ T30] ret_from_fork+0x4b/0x80 [ 287.208469][ T30] ? __pfx_kthread+0x10/0x10 [ 287.208488][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.208521][ T30] [ 287.211874][ T30] Kernel Offset: disabled [ 287.811465][ T30] Rebooting in 86400 seconds..