Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. executing program [ 180.745652][ T4261] loop0: detected capacity change from 0 to 16 [ 180.759288][ T4261] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.769577][ T4261] syz-executor422: attempt to access beyond end of device [ 180.769577][ T4261] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 429.655425][ T27] INFO: task syz-executor422:4261 blocked for more than 143 seconds. [ 429.663699][ T27] Not tainted 6.1.119-syzkaller #0 [ 429.669406][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.678216][ T27] task:syz-executor422 state:D stack:23392 pid:4261 ppid:4260 flags:0x00004006 [ 429.687652][ T27] Call Trace: [ 429.690999][ T27] [ 429.693939][ T27] __schedule+0x143f/0x4570 [ 429.698571][ T27] ? release_firmware_map_entry+0x186/0x186 [ 429.704550][ T27] ? blk_check_plugged+0x250/0x250 [ 429.709725][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 429.715789][ T27] ? blk_check_plugged+0x250/0x250 [ 429.720959][ T27] ? print_irqtrace_events+0x210/0x210 [ 429.726472][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.731615][ T27] schedule+0xbf/0x180 [ 429.735883][ T27] io_schedule+0x88/0x100 [ 429.740240][ T27] folio_wait_bit_common+0x878/0x1290 [ 429.745697][ T27] ? folio_wait_bit+0x20/0x20 [ 429.750421][ T27] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 429.756935][ T27] ? erofs_map_blocks+0x1a30/0x1a30 [ 429.762153][ T27] ? bio_add_page+0x3a4/0x750 [ 429.766889][ T27] z_erofs_runqueue+0xa59/0x1e10 [ 429.771876][ T27] ? z_erofs_do_read_page+0x3d00/0x3d00 [ 429.777520][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 429.782599][ T27] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 429.788474][ T27] z_erofs_readahead+0xc26/0x1030 [ 429.793542][ T27] ? z_erofs_read_folio+0x760/0x760 [ 429.798865][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 429.803941][ T27] ? blk_start_plug+0x95/0x110 [ 429.808808][ T27] read_pages+0x17f/0x830 [ 429.813180][ T27] ? folio_add_lru+0x34d/0xd70 [ 429.818025][ T27] ? folio_add_lru+0x34d/0xd70 [ 429.822815][ T27] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 429.828512][ T27] ? __filemap_add_folio+0x1b00/0x1b00 [ 429.834011][ T27] page_cache_ra_unbounded+0x68b/0x7b0 [ 429.839570][ T27] force_page_cache_ra+0x2a3/0x300 [ 429.844723][ T27] generic_fadvise+0x553/0x7b0 [ 429.849548][ T27] ? dump_task+0x620/0x620 [ 429.853994][ T27] ? print_irqtrace_events+0x210/0x210 [ 429.859576][ T27] ? print_irqtrace_events+0x210/0x210 [ 429.865125][ T27] ? __fdget+0x14e/0x210 [ 429.869396][ T27] __x64_sys_fadvise64+0x138/0x180 [ 429.874519][ T27] do_syscall_64+0x3b/0xb0 [ 429.879004][ T27] ? clear_bhb_loop+0x45/0xa0 [ 429.883718][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.889672][ T27] RIP: 0033:0x7f64c8e05a99 [ 429.894119][ T27] RSP: 002b:00007ffc63d33868 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 429.902618][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64c8e05a99 [ 429.910643][ T27] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004 [ 429.918681][ T27] RBP: 00007f64c8e795f0 R08: 00005555733e54c0 R09: 00005555733e54c0 [ 429.926729][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffc63d33890 [ 429.934806][ T27] R13: 00007ffc63d33ab8 R14: 431bde82d7b634db R15: 00007f64c8e4e03b [ 429.942861][ T27] [ 429.945965][ T27] [ 429.945965][ T27] Showing all locks held in the system: [ 429.953687][ T27] 1 lock held by rcu_tasks_kthre/12: [ 429.959501][ T27] #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 429.970082][ T27] 1 lock held by rcu_tasks_trace/13: [ 429.975465][ T27] #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 429.986504][ T27] 1 lock held by khungtaskd/27: [ 429.991368][ T27] #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 430.001330][ T27] 2 locks held by getty/4004: [ 430.006058][ T27] #0: ffff88807e258098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 430.016057][ T27] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 430.026250][ T27] 1 lock held by syz-executor422/4261: [ 430.031705][ T27] #0: ffff888074280338 (mapping.invalidate_lock#3){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 430.042953][ T27] [ 430.045330][ T27] ============================================= [ 430.045330][ T27] [ 430.053751][ T27] NMI backtrace for cpu 0 [ 430.058084][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 430.065982][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.076165][ T27] Call Trace: [ 430.079464][ T27] [ 430.082399][ T27] dump_stack_lvl+0x1e3/0x2cb [ 430.087296][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 430.092763][ T27] ? panic+0x764/0x764 [ 430.096829][ T27] ? vprintk_emit+0x622/0x740 [ 430.101516][ T27] ? printk_sprint+0x490/0x490 [ 430.106293][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 430.111428][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 430.116390][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 430.122559][ T27] ? _printk+0xd1/0x111 [ 430.126724][ T27] ? panic+0x764/0x764 [ 430.130801][ T27] ? __wake_up_klogd+0xcc/0x100 [ 430.135674][ T27] ? panic+0x764/0x764 [ 430.139770][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 430.145880][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 430.151967][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 430.158000][ T27] watchdog+0xf88/0xfd0 [ 430.162267][ T27] ? watchdog+0x1f8/0xfd0 [ 430.166646][ T27] kthread+0x28d/0x320 [ 430.170739][ T27] ? hungtask_pm_notify+0x50/0x50 [ 430.175788][ T27] ? kthread_blkcg+0xd0/0xd0 [ 430.180399][ T27] ret_from_fork+0x1f/0x30 [ 430.184849][ T27] [ 430.188097][ T27] Sending NMI from CPU 0 to CPUs 1: [ 430.193410][ C1] NMI backtrace for cpu 1 [ 430.193426][ C1] CPU: 1 PID: 51 Comm: kworker/u4:3 Not tainted 6.1.119-syzkaller #0 [ 430.193443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.193453][ C1] Workqueue: events_unbound toggle_allocation_gate [ 430.193482][ C1] RIP: 0010:x2apic_send_IPI+0x77/0xd0 [ 430.193503][ C1] Code: 48 c1 e8 03 42 0f b6 04 38 84 c0 75 26 0f b7 13 0f ae f0 0f ae e8 41 83 fe 02 b8 00 04 00 00 41 0f 45 c6 b9 30 08 00 00 0f 30 <66> 90 5b 41 5e 41 5f 5d c3 89 d9 80 e1 07 fe c1 38 c1 7c cf 48 89 [ 430.193520][ C1] RSP: 0018:ffffc90000bc74b8 EFLAGS: 00000206 [ 430.193534][ C1] RAX: 00000000000000fb RBX: ffff8880b8e219b0 RCX: 0000000000000830 [ 430.193545][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 430.193555][ C1] RBP: ffffffff8cda3870 R08: ffffffff817f57e9 R09: ffffed10171e7753 [ 430.193568][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 430.193579][ C1] R13: 1ffff92000178ea0 R14: 00000000000000fb R15: dffffc0000000000 [ 430.193591][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 430.193605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.193617][ C1] CR2: 000056046b7d5028 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 430.193631][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.193641][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.193651][ C1] Call Trace: [ 430.193656][ C1] [ 430.193662][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 430.193687][ C1] ? read_lock_is_recursive+0x10/0x10 [ 430.193714][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 430.193740][ C1] ? nmi_handle+0x25/0x440 [ 430.193772][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 430.193787][ C1] ? nmi_handle+0x12e/0x440 [ 430.193813][ C1] ? nmi_handle+0x25/0x440 [ 430.193839][ C1] ? x2apic_send_IPI+0x77/0xd0 [ 430.193857][ C1] ? default_do_nmi+0x62/0x150 [ 430.193884][ C1] ? exc_nmi+0xa8/0x100 [ 430.193908][ C1] ? end_repeat_nmi+0x16/0x31 [ 430.193936][ C1] ? smp_call_function_many_cond+0x1bd9/0x3460 [ 430.193960][ C1] ? x2apic_send_IPI+0x77/0xd0 [ 430.193979][ C1] ? x2apic_send_IPI+0x77/0xd0 [ 430.193999][ C1] ? x2apic_send_IPI+0x77/0xd0 [ 430.194018][ C1] [ 430.194022][ C1] [ 430.194028][ C1] send_call_function_single_ipi+0x188/0x260 [ 430.194054][ C1] ? ttwu_do_activate+0x370/0x370 [ 430.194082][ C1] ? __bitmap_and+0x2ef/0x310 [ 430.194110][ C1] ? _find_next_bit+0xe9/0x120 [ 430.194132][ C1] smp_call_function_many_cond+0x1bef/0x3460 [ 430.194163][ C1] ? text_poke_sync+0x20/0x20 [ 430.194187][ C1] ? __text_poke+0x81a/0x9a0 [ 430.194206][ C1] ? mark_lock+0x9a/0x340 [ 430.194230][ C1] ? smp_call_function_many+0x30/0x30 [ 430.194252][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 430.194279][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 430.194300][ C1] ? _raw_spin_unlock+0x24/0x40 [ 430.194320][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 430.194341][ C1] ? __text_poke+0x81a/0x9a0 [ 430.194363][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 430.194384][ C1] ? __text_poke+0x9a0/0x9a0 [ 430.194405][ C1] ? text_poke+0x90/0x90 [ 430.194424][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 430.194446][ C1] ? perf_event_text_poke+0x254/0x320 [ 430.194466][ C1] ? __mutex_trylock_common+0x17e/0x2e0 [ 430.194489][ C1] ? perf_event_bpf_output+0x270/0x270 [ 430.194509][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 430.194534][ C1] ? text_poke_sync+0x20/0x20 [ 430.194555][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 430.194577][ C1] text_poke_bp_batch+0x860/0x940 [ 430.194602][ C1] ? kmem_cache_alloc_bulk+0x11b/0x4d0 [ 430.194624][ C1] ? text_poke_loc_init+0x680/0x680 [ 430.194647][ C1] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 430.194670][ C1] text_poke_finish+0x16/0x30 [ 430.194690][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 430.194708][ C1] static_key_disable_cpuslocked+0xce/0x1b0 [ 430.194732][ C1] static_key_disable+0x16/0x20 [ 430.194753][ C1] toggle_allocation_gate+0x3e0/0x480 [ 430.194775][ C1] ? show_object+0xa0/0xa0 [ 430.194796][ C1] ? wake_bit_function+0x210/0x210 [ 430.194821][ C1] ? print_irqtrace_events+0x210/0x210 [ 430.194845][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 430.194868][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 430.194888][ C1] ? process_one_work+0x7a9/0x11d0 [ 430.194908][ C1] process_one_work+0x8a9/0x11d0 [ 430.194935][ C1] ? worker_detach_from_pool+0x260/0x260 [ 430.194957][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 430.194978][ C1] ? kthread_data+0x4e/0xc0 [ 430.195005][ C1] ? wq_worker_running+0x97/0x190 [ 430.195022][ C1] worker_thread+0xa47/0x1200 [ 430.195046][ C1] ? _raw_spin_unlock+0x40/0x40 [ 430.195085][ C1] kthread+0x28d/0x320 [ 430.195100][ C1] ? worker_clr_flags+0x190/0x190 [ 430.195120][ C1] ? kthread_blkcg+0xd0/0xd0 [ 430.195137][ C1] ret_from_fork+0x1f/0x30 [ 430.195170][ C1] [ 430.195176][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.767 msecs [ 430.196413][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 430.196426][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 430.196448][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.196461][ T27] Call Trace: [ 430.196467][ T27] [ 430.196475][ T27] dump_stack_lvl+0x1e3/0x2cb [ 430.196513][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 430.196546][ T27] ? panic+0x764/0x764 [ 430.196568][ T27] ? llist_add_batch+0x160/0x1d0 [ 430.196603][ T27] ? vscnprintf+0x59/0x80 [ 430.196630][ T27] panic+0x318/0x764 [ 430.196654][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 430.196690][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 430.196718][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 430.196752][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 430.196789][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 430.196827][ T27] watchdog+0xfc7/0xfd0 [ 430.196862][ T27] ? watchdog+0x1f8/0xfd0 [ 430.196896][ T27] kthread+0x28d/0x320 [ 430.196916][ T27] ? hungtask_pm_notify+0x50/0x50 [ 430.196944][ T27] ? kthread_blkcg+0xd0/0xd0 [ 430.196967][ T27] ret_from_fork+0x1f/0x30 [ 430.197010][ T27] [ 430.199841][ T27] Kernel Offset: disabled [ 430.811444][ T27] Rebooting in 86400 seconds..