./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1095842600 <...> Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. execve("./syz-executor1095842600", ["./syz-executor1095842600"], 0x7ffcdb42f540 /* 10 vars */) = 0 brk(NULL) = 0x555556471000 brk(0x555556471d00) = 0x555556471d00 arch_prctl(ARCH_SET_FS, 0x555556471380) = 0 set_tid_address(0x555556471650) = 5014 set_robust_list(0x555556471660, 24) = 0 rseq(0x555556471ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1095842600", 4096) = 28 getrandom("\x41\x47\x0c\x4d\xc6\x55\x21\xa9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556471d00 brk(0x555556492d00) = 0x555556492d00 brk(0x555556493000) = 0x555556493000 mprotect(0x7f545755e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 [ 62.163268][ T26] audit: type=1400 audit(1691478962.730:83): avc: denied { write } for pid=5011 comm="strace-static-x" path="pipe:[29662]" dev="pipefs" ino=29662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556471650) = 5015 ./strace-static-x86_64: Process 5015 attached [pid 5015] set_robust_list(0x555556471660, 24) = 0 [pid 5015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] setpgid(0, 0) = 0 [pid 5015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] write(3, "1000", 4) = 4 [pid 5015] close(3) = 0 [ 62.199602][ T26] audit: type=1400 audit(1691478962.770:84): avc: denied { execmem } for pid=5014 comm="syz-executor109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.220750][ T26] audit: type=1400 audit(1691478962.770:85): avc: denied { read write } for pid=5014 comm="syz-executor109" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5015] memfd_create("syzkaller", 0) = 3 [pid 5015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f544f08a000 [ 62.247953][ T26] audit: type=1400 audit(1691478962.770:86): avc: denied { open } for pid=5014 comm="syz-executor109" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.260977][ T5015] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5015 'syz-executor109' [ 62.273489][ T26] audit: type=1400 audit(1691478962.770:87): avc: denied { ioctl } for pid=5014 comm="syz-executor109" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5015] munmap(0x7f544f08a000, 16777216) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5015] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5015] close(3) = 0 [pid 5015] mkdir("./file0", 0777) = 0 [ 62.559639][ T5015] loop0: detected capacity change from 0 to 32768 [ 62.568271][ T26] audit: type=1400 audit(1691478963.140:88): avc: denied { append } for pid=4451 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.588828][ T5015] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.590580][ T26] audit: type=1400 audit(1691478963.140:89): avc: denied { open } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.599473][ T5015] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.622104][ T26] audit: type=1400 audit(1691478963.140:90): avc: denied { getattr } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.643384][ T5015] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 62.651761][ T26] audit: type=1400 audit(1691478963.140:91): avc: denied { mounton } for pid=5015 comm="syz-executor109" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.684286][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.691320][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [pid 5015] mount("/dev/loop0", "./file0", "gfs2", MS_SYNCHRONOUS|MS_POSIXACL, "nodiscard,rgrplvb,noloccookie,statfs_quantum=0x0000000000000000,quota,nosuiddir," [pid 5014] kill(-5015, SIGKILL) = 0 [pid 5014] kill(5015, SIGKILL) = 0 [pid 5014] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5014] getdents64(3, 0x5555564726f0 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(3, 0x5555564726f0 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [ 81.698902][ T917] cfg80211: failed to load regulatory.db [ 286.497042][ T27] INFO: task kworker/1:0:21 blocked for more than 143 seconds. [ 286.504706][ T27] Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 286.512376][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.521462][ T27] task:kworker/1:0 state:D stack:27328 pid:21 ppid:2 flags:0x00004000 [ 286.530921][ T27] Workqueue: gfs_recovery gfs2_recover_func [ 286.537023][ T27] Call Trace: [ 286.540307][ T27] [ 286.543231][ T27] __schedule+0xee1/0x59f0 [ 286.547914][ T27] ? mark_lock+0x105/0x1950 [ 286.552502][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.558680][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 286.564691][ T27] ? io_schedule_timeout+0x150/0x150 [ 286.570172][ T27] ? find_held_lock+0x2d/0x110 [ 286.574961][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 286.580509][ T27] ? kthread_data+0x53/0xc0 [ 286.585093][ T27] schedule+0xe7/0x1b0 [ 286.589340][ T27] io_schedule+0xbe/0x130 [ 286.593696][ T27] folio_wait_bit_common+0x3d0/0x9a0 [ 286.599217][ T27] ? filemap_cachestat+0x970/0x970 [ 286.604357][ T27] ? __submit_bio+0x102/0x310 [ 286.609450][ T27] ? folio_unlock+0xd0/0xd0 [ 286.613984][ T27] ? __filemap_get_folio+0x1e7/0x990 [ 286.619459][ T27] gfs2_jhead_process_page+0x4bc/0x590 [ 286.625003][ T27] ? revoke_lo_scan_elements+0x6f0/0x6f0 [ 286.630964][ T27] gfs2_find_jhead+0xa30/0xd00 [ 286.635792][ T27] ? databuf_lo_before_commit+0x100/0x100 [ 286.641651][ T27] gfs2_recover_func+0x725/0x2280 [ 286.646746][ T27] ? save_trace+0x2ff/0xb30 [ 286.651402][ T27] ? _find_first_zero_bit+0x94/0xb0 [ 286.656689][ T27] ? add_lock_to_list+0x17d/0x380 [ 286.661871][ T27] ? __get_log_header+0x490/0x490 [ 286.667070][ T27] ? spin_bug+0x1d0/0x1d0 [ 286.671420][ T27] ? process_one_work+0xaa2/0x16f0 [ 286.676536][ T27] process_one_work+0xaa2/0x16f0 [ 286.681527][ T27] ? lock_sync+0x190/0x190 [ 286.685967][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.691476][ T27] ? spin_bug+0x1d0/0x1d0 [ 286.695848][ T27] worker_thread+0x687/0x1110 [ 286.700584][ T27] ? process_one_work+0x16f0/0x16f0 [ 286.705817][ T27] kthread+0x33a/0x430 [ 286.710010][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.715661][ T27] ret_from_fork+0x2c/0x70 [ 286.720179][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 286.725833][ T27] ret_from_fork_asm+0x11/0x20 [ 286.730780][ T27] [ 286.733931][ T27] INFO: task syz-executor109:5015 blocked for more than 143 seconds. [ 286.742059][ T27] Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 286.749653][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.758381][ T27] task:syz-executor109 state:D stack:25840 pid:5015 ppid:5014 flags:0x00004006 [ 286.767719][ T27] Call Trace: [ 286.771012][ T27] [ 286.773949][ T27] __schedule+0xee1/0x59f0 [ 286.778448][ T27] ? io_schedule_timeout+0x150/0x150 [ 286.783762][ T27] ? io_schedule_timeout+0x150/0x150 [ 286.789128][ T27] ? preempt_schedule_common+0x45/0xc0 [ 286.794612][ T27] schedule+0xe7/0x1b0 [ 286.798743][ T27] bit_wait+0x16/0xe0 [ 286.802754][ T27] __wait_on_bit+0x62/0x170 [ 286.807332][ T27] ? bit_wait_io+0xe0/0xe0 [ 286.811773][ T27] out_of_line_wait_on_bit+0xdb/0x110 [ 286.817222][ T27] ? __wait_on_bit+0x170/0x170 [ 286.822012][ T27] ? pick_next_task_stop+0x1c0/0x1c0 [ 286.827378][ T27] ? queue_work_on+0x97/0x110 [ 286.832078][ T27] gfs2_recover_journal+0x13d/0x160 [ 286.837370][ T27] init_inodes+0x2297/0x2e30 [ 286.842002][ T27] ? end_bio_io_page+0xd0/0xd0 [ 286.846760][ T27] ? gfs2_fill_super+0x1a9e/0x2b10 [ 286.851934][ T27] ? init_sb+0x9d8/0x10e0 [ 286.856281][ T27] ? vsprintf+0x30/0x30 [ 286.860550][ T27] ? gfs2_fill_super+0x1a9e/0x2b10 [ 286.865679][ T27] gfs2_fill_super+0x1a9e/0x2b10 [ 286.870689][ T27] ? gfs2_reconfigure+0xee0/0xee0 [ 286.875738][ T27] ? gfs2_fill_super+0x1736/0x2b10 [ 286.880895][ T27] ? set_blocksize+0x2bd/0x360 [ 286.885682][ T27] get_tree_bdev+0x43e/0x7d0 [ 286.890399][ T27] ? gfs2_reconfigure+0xee0/0xee0 [ 286.895453][ T27] gfs2_get_tree+0x4e/0x280 [ 286.900266][ T27] vfs_get_tree+0x88/0x350 [ 286.904713][ T27] path_mount+0x1492/0x1ed0 [ 286.909380][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.914649][ T27] ? finish_automount+0xa50/0xa50 [ 286.919770][ T27] ? putname+0x101/0x140 [ 286.924032][ T27] __x64_sys_mount+0x293/0x310 [ 286.928894][ T27] ? copy_mnt_ns+0xb60/0xb60 [ 286.933505][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 286.938772][ T27] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.944001][ T27] ? ptrace_notify+0xf4/0x130 [ 286.948753][ T27] do_syscall_64+0x38/0xb0 [ 286.953184][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.959190][ T27] RIP: 0033:0x7f54574ca0ea [ 286.963614][ T27] RSP: 002b:00007ffd3c0dc6a8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 286.972094][ T27] RAX: ffffffffffffffda RBX: 00007ffd3c0dc6c0 RCX: 00007f54574ca0ea [ 286.980126][ T27] RDX: 0000000020021140 RSI: 0000000020021180 RDI: 00007ffd3c0dc6c0 [ 286.988164][ T27] RBP: 0000000000000004 R08: 00007ffd3c0dc700 R09: 0000000000021193 [ 286.996157][ T27] R10: 0000000000010010 R11: 0000000000000282 R12: 0000000000010010 [ 287.004229][ T27] R13: 00007ffd3c0dc700 R14: 0000000000000003 R15: 0000000001000000 [ 287.012262][ T27] [ 287.015278][ T27] [ 287.015278][ T27] Showing all locks held in the system: [ 287.023047][ T27] 5 locks held by kworker/u4:0/9: [ 287.028155][ T27] 1 lock held by rcu_tasks_kthre/12: [ 287.033446][ T27] #0: ffffffff8c9a2730 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.043942][ T27] 1 lock held by rcu_tasks_trace/13: [ 287.049295][ T27] #0: ffffffff8c9a2430 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 287.060344][ T27] 2 locks held by kworker/1:0/21: [ 287.065373][ T27] #0: ffff888015fba138 ((wq_completion)gfs_recovery){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 287.076328][ T27] #1: ffffc900003cfd80 ((work_completion)(&jd->jd_work)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 287.087659][ T27] 1 lock held by khungtaskd/27: [ 287.092496][ T27] #0: ffffffff8c9a3340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 287.102410][ T27] 2 locks held by getty/4767: [ 287.107146][ T27] #0: ffff88814adc3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.116985][ T27] #1: ffffc900020382f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 287.127192][ T27] 1 lock held by syz-executor109/5015: [ 287.132648][ T27] #0: ffff888021d300e0 (&type->s_umount_key#57/1){+.+.}-{3:3}, at: alloc_super+0x22e/0xb40 [ 287.142865][ T27] [ 287.145197][ T27] ============================================= [ 287.145197][ T27] [ 287.153699][ T27] NMI backtrace for cpu 1 [ 287.158032][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 287.167847][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.177931][ T27] Call Trace: [ 287.181215][ T27] [ 287.184147][ T27] dump_stack_lvl+0xd9/0x1b0 [ 287.188818][ T27] nmi_cpu_backtrace+0x277/0x380 [ 287.193780][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.199001][ T27] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 287.205030][ T27] watchdog+0xf29/0x11b0 [ 287.209310][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.215316][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.221318][ T27] kthread+0x33a/0x430 [ 287.225396][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 287.231127][ T27] ret_from_fork+0x2c/0x70 [ 287.235556][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 287.241199][ T27] ret_from_fork_asm+0x11/0x20 [ 287.245983][ T27] [ 287.249131][ T27] Sending NMI from CPU 1 to CPUs 0: [ 287.254366][ C0] NMI backtrace for cpu 0 [ 287.254376][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 287.254398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.254409][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.254456][ C0] RIP: 0010:__lock_acquire+0xcfd/0x5de0 [ 287.254483][ C0] Code: 00 00 0f b7 44 24 40 8b 5c 24 48 8b 4c 24 68 c1 e0 0d 66 0b 44 24 10 98 44 29 f0 31 d8 8b 5c 24 60 89 c2 29 c1 c1 c2 06 31 ca <01> d8 89 d1 29 d3 c1 c1 08 89 dd 01 c2 31 cd 89 e9 29 e8 01 d5 c1 [ 287.254502][ C0] RSP: 0018:ffffc900002ff670 EFLAGS: 00000082 [ 287.254516][ C0] RAX: 00000000d3226462 RBX: 00000000612435ec RCX: 000000006d400ba7 [ 287.254529][ C0] RDX: 00000000a5d91313 RSI: 0000000000000008 RDI: ffffffff91843c50 [ 287.254542][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff23081d0 [ 287.254554][ C0] R10: ffffffff91840e87 R11: 0000000000000000 R12: ffff88801925edb2 [ 287.254566][ C0] R13: ffff88801925ed90 R14: 0000000020c1c5e3 R15: 0000000000000001 [ 287.254579][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 287.254598][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.254612][ C0] CR2: 0000558c45b18600 CR3: 000000000c776000 CR4: 00000000003506f0 [ 287.254624][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.254635][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.254647][ C0] Call Trace: [ 287.254651][ C0] [ 287.254657][ C0] ? nmi_cpu_backtrace+0x1d4/0x380 [ 287.254688][ C0] ? __lock_acquire+0xcfd/0x5de0 [ 287.254710][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 287.254738][ C0] ? nmi_handle+0x145/0x400 [ 287.254760][ C0] ? irqentry_nmi_enter+0x7f/0x90 [ 287.254784][ C0] ? __lock_acquire+0xcfd/0x5de0 [ 287.254806][ C0] ? default_do_nmi+0x69/0x160 [ 287.254826][ C0] ? exc_nmi+0x171/0x1e0 [ 287.254845][ C0] ? end_repeat_nmi+0x16/0x31 [ 287.254868][ C0] ? __lock_acquire+0xcfd/0x5de0 [ 287.254890][ C0] ? __lock_acquire+0xcfd/0x5de0 [ 287.254912][ C0] ? __lock_acquire+0xcfd/0x5de0 [ 287.254935][ C0] [ 287.254940][ C0] [ 287.254947][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.254970][ C0] ? finish_task_switch.isra.0+0x211/0xc90 [ 287.254991][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 287.255014][ C0] ? mark_lock+0x105/0x1950 [ 287.255036][ C0] lock_acquire+0x1ae/0x510 [ 287.255058][ C0] ? __pte_offset_map_lock+0xf1/0x250 [ 287.255079][ C0] ? lock_sync+0x190/0x190 [ 287.255101][ C0] ? print_usage_bug.part.0+0x670/0x670 [ 287.255124][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.255148][ C0] _raw_spin_lock+0x2e/0x40 [ 287.255181][ C0] ? __pte_offset_map_lock+0xf1/0x250 [ 287.255200][ C0] __pte_offset_map_lock+0xf1/0x250 [ 287.255221][ C0] ? pte_offset_map_nolock+0x1b0/0x1b0 [ 287.255242][ C0] __get_locked_pte+0x75/0xc0 [ 287.255263][ C0] ? kmem_cache_alloc_node+0xc1/0x540 [ 287.255290][ C0] __text_poke+0x1be/0x8a0 [ 287.255307][ C0] ? setup_data_read+0x200/0x200 [ 287.255325][ C0] ? apply_relocation+0x680/0x680 [ 287.255344][ C0] text_poke_bp_batch+0x507/0x780 [ 287.255362][ C0] ? kmem_cache_alloc_node+0xc1/0x540 [ 287.255387][ C0] ? __kmem_cache_alloc_node+0xbd/0x470 [ 287.255414][ C0] ? do_sync_core+0x30/0x30 [ 287.255431][ C0] ? __jump_label_patch+0x19c/0x340 [ 287.255456][ C0] ? arch_jump_label_transform_queue+0xa3/0x100 [ 287.255485][ C0] text_poke_finish+0x1a/0x30 [ 287.255503][ C0] arch_jump_label_transform_apply+0x17/0x30 [ 287.255530][ C0] jump_label_update+0x32e/0x410 [ 287.255560][ C0] static_key_disable_cpuslocked+0x154/0x1b0 [ 287.255580][ C0] static_key_disable+0x1a/0x20 [ 287.255596][ C0] toggle_allocation_gate+0x13f/0x250 [ 287.255618][ C0] ? wake_up_kfence_timer+0x30/0x30 [ 287.255639][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.255663][ C0] process_one_work+0xaa2/0x16f0 [ 287.255685][ C0] ? lock_sync+0x190/0x190 [ 287.255706][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 287.255728][ C0] ? spin_bug+0x1d0/0x1d0 [ 287.255752][ C0] worker_thread+0x687/0x1110 [ 287.255774][ C0] ? process_one_work+0x16f0/0x16f0 [ 287.255794][ C0] kthread+0x33a/0x430 [ 287.255811][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.255831][ C0] ret_from_fork+0x2c/0x70 [ 287.255852][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 287.255871][ C0] ret_from_fork_asm+0x11/0x20 [ 287.255899][ C0] [ 287.255906][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.540 msecs [ 287.256367][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 287.703863][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 287.713678][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 287.723734][ T27] Call Trace: [ 287.727013][ T27] [ 287.729946][ T27] dump_stack_lvl+0xd9/0x1b0 [ 287.734560][ T27] panic+0x6a4/0x750 [ 287.738469][ T27] ? panic_smp_self_stop+0xa0/0xa0 [ 287.743593][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 287.748812][ T27] ? preempt_schedule_thunk+0x1a/0x30 [ 287.754204][ T27] ? watchdog+0xce1/0x11b0 [ 287.758641][ T27] watchdog+0xcf2/0x11b0 [ 287.762902][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.768903][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 287.774902][ T27] kthread+0x33a/0x430 [ 287.778978][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 287.784621][ T27] ret_from_fork+0x2c/0x70 [ 287.789053][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 287.794694][ T27] ret_from_fork_asm+0x11/0x20 [ 287.799480][ T27] [ 287.802795][ T27] Kernel Offset: disabled [ 287.807113][ T27] Rebooting in 86400 seconds..