./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor365444039 <...> Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. execve("./syz-executor365444039", ["./syz-executor365444039"], 0x7ffd86bae630 /* 10 vars */) = 0 brk(NULL) = 0x55555e8df000 brk(0x55555e8dfd00) = 0x55555e8dfd00 arch_prctl(ARCH_SET_FS, 0x55555e8df380) = 0 set_tid_address(0x55555e8df650) = 5817 set_robust_list(0x55555e8df660, 24) = 0 rseq(0x55555e8dfca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor365444039", 4096) = 27 getrandom("\xda\x8b\x09\x2f\x0d\xe5\x0f\xac", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555e8dfd00 brk(0x55555e900d00) = 0x55555e900d00 brk(0x55555e901000) = 0x55555e901000 mprotect(0x7f764003a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.EfBU10", 0700) = 0 chmod("./syzkaller.EfBU10", 0777) = 0 chdir("./syzkaller.EfBU10") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5819 attached [pid 5819] set_robust_list(0x55555e8df660, 24) = 0 [pid 5819] chdir("./0") = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5817] <... clone resumed>, child_tidptr=0x55555e8df650) = 5819 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5819] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5819] write(1, "executing program\n", 18) = 18 [pid 5819] memfd_create("syzkaller", 0) = 3 [pid 5819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7637a00000 [pid 5819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5819] munmap(0x7f7637a00000, 138412032) = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5819] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5819] close(3) = 0 [pid 5819] close(4) = 0 [pid 5819] mkdir("./file0", 0777) = 0 [ 66.260473][ T5819] loop0: detected capacity change from 0 to 32768 [ 66.336988][ T5819] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 66.352578][ T5819] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 66.371677][ T5819] bcachefs (loop0): accounting_read... done [ 66.378808][ T5819] bcachefs (loop0): alloc_read... done [pid 5819] mount("/dev/loop0", "./file0", "bcachefs", 0, "\x10\xf7\xe7\xab\x27\x5e\x7b\x9e\xc1\x8a\x06\x63\x35\x54\xe2\xf6\xfa\xd2\xf9\xfb\xc1\x7a\x1b\x2f\xed\xc7\xf5\x95") = 0 [pid 5819] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 66.384469][ T5819] bcachefs (loop0): stripes_read... done [ 66.390176][ T5819] bcachefs (loop0): snapshots_read... done [ 66.398245][ T5819] bcachefs (loop0): journal_replay... done [ 66.404211][ T5819] bcachefs (loop0): resume_logged_ops... done [ 66.410510][ T5819] bcachefs (loop0): delete_dead_inodes... done [ 66.419302][ T5819] bcachefs (loop0): going read-write [ 66.428498][ T5819] bcachefs (loop0): done starting filesystem [pid 5819] chdir("./file0") = 0 [pid 5819] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5819] ioctl(4, LOOP_CLR_FD) = 0 [pid 5819] close(4) = 0 [pid 5819] exit_group(0) = ? [pid 5819] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 66.504002][ T5819] syz-executor365 (5819) used greatest stack depth: 19248 bytes left newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55555e8e06f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 66.613684][ T5817] bcachefs (loop0): shutting down [ 66.618841][ T5817] bcachefs (loop0): going read-only [ 66.624377][ T5817] bcachefs (loop0): finished waiting for writes to stop [ 82.043003][ T58] cfg80211: failed to load regulatory.db [ 96.771619][ T5828] Allocator stuck? Waited for 30 seconds [ 96.771632][ T5828] Allocator debug: [ 96.771637][ T5828] capacity1536 [ 96.771642][ T5828] reserved 31232 [ 96.771647][ T5828] hidden 0 [ 96.771652][ T5828] btree 0 [ 96.771656][ T5828] data 0 [ 96.771661][ T5828] cached 0 [ 96.771666][ T5828] reserved 0 [ 96.771670][ T5828] online_reserved 24 [ 96.771675][ T5828] nr_inodes 0 [ 96.771680][ T5828] [ 96.771684][ T5828] freelist_wait waiting [ 96.771689][ T5828] open buckets allocated1 [ 96.771694][ T5828] open buckets total 1024 [ 96.771699][ T5828] open_buckets_wait empty [ 96.771703][ T5828] open_buckets_btree 0 [ 96.771708][ T5828] open_buckets_user 0 [ 96.771713][ T5828] btree reserve cache 0 [ 96.771717][ T5828] [ 96.771722][ T5828] Dev 0: [ 96.771726][ T5828] buckets sectors fragmented [ 96.771731][ T5828] free 0 0 0 [ 96.771737][ T5828] sb 0 0 0 [ 96.771742][ T5828] journal 0 0 0 [ 96.771747][ T5828] btree 0 0 0 [ 96.771753][ T5828] user 0 0 0 [ 96.771758][ T5828] cached 0 0 0 [ 96.771764][ T5828] parity 0 0 0 [ 96.771769][ T5828] stripe 0 0 0 [ 96.771774][ T5828] need_gc_gens 0 0 0 [ 96.771780][ T5828] need_discard 0 0 0 [ 96.771785][ T5828] unstriped 0 0 0 [ 96.771791][ T5828] capacity 128 [ 96.771796][ T5828] [ 96.771800][ T5828] reserves: [ 96.771804][ T5828] stripe 60 [ 96.771809][ T5828] normal 58 [ 96.771814][ T5828] copygc 56 [ 96.771818][ T5828] btree 28 [ 96.771823][ T5828] btree_copygc 0 [ 96.771828][ T5828] reclaim 0 [ 96.771833][ T5828] interior_updates 0 [ 96.771837][ T5828] [ 96.771842][ T5828] open buckets 0 [ 96.771846][ T5828] buckets to invalidate 0 [ 96.771851][ T5828] [ 96.771855][ T5828] Copygc debug: [ 96.771860][ T5828] running: 1 [ 96.771864][ T5828] copygc_wait:0 [ 96.771869][ T5828] copygc_wait_at:0 [ 96.771874][ T5828] Currently waiting for:0 B [ 96.771879][ T5828] Currently waiting since:640 KiB [ 96.771884][ T5828] Currently calculated wait:0 B [ 96.771888][ T5828] [ 96.771893][ T5828] Journal debug: [ 96.771897][ T5828] flags: replay_done,running,may_skip_flush,need_flush_write [ 96.771903][ T5828] dirty journal entries: 0/32768 [ 96.771908][ T5828] seq: 13 [ 96.771913][ T5828] seq_ondisk: 13 [ 96.771918][ T5828] last_seq: 14 [ 96.771922][ T5828] last_seq_ondisk: 14 [ 96.771927][ T5828] flushed_seq_ondisk: 13 [ 96.771932][ T5828] watermark: stripe [ 96.771937][ T5828] each entry reserved: 321 [ 96.771941][ T5828] nr flush writes: 0 [ 96.771946][ T5828] nr noflush writes: 0 [ 96.771951][ T5828] average write size: 0 B [ 96.771956][ T5828] nr direct reclaim: 0 [ 96.771960][ T5828] nr background reclaim: 0 [ 96.771965][ T5828] reclaim kicked: 0 [ 96.771970][ T5828] reclaim runs in: 0 ms [ 96.771975][ T5828] blocked: 0 [ 96.771980][ T5828] current entry sectors: 256 [ 96.771984][ T5828] current entry error: ok [ 96.771989][ T5828] current entry: closed [ 96.771994][ T5828] unwritten entries: [ 96.771999][ T5828] last buf closed [ 96.772005][ T5828] space: [ 96.772010][ T5828] discarded 256:1792 [ 96.772017][ T5828] clean ondisk 256:1792 [ 96.772025][ T5828] clean 256:1792 [ 96.772032][ T5828] total 256:2048 [ 96.772039][ T5828] dev 0: [ 96.772043][ T5828] nr 8 [ 96.772048][ T5828] bucket size 256 [ 96.772053][ T5828] available 6:256 [ 96.772058][ T5828] discard_idx 0 [ 96.772062][ T5828] dirty_ondisk 0 (seq 0) [ 96.772067][ T5828] dirty_idx 0 (seq 0) [ 96.772072][ T5828] cur_idx 0 (seq 0) [ 96.772077][ T5828] [ 286.842387][ T30] INFO: task syz-executor365:5817 blocked for more than 143 seconds. [ 286.850671][ T30] Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 286.858405][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.867135][ T30] task:syz-executor365 state:D stack:23840 pid:5817 tgid:5817 ppid:5814 flags:0x00004002 [ 286.877477][ T30] Call Trace: [ 286.880773][ T30] [ 286.883752][ T30] __schedule+0x17fb/0x4be0 [ 286.888311][ T30] ? __pfx___schedule+0x10/0x10 [ 286.893212][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.898265][ T30] ? schedule+0x90/0x320 [ 286.902558][ T30] schedule+0x14b/0x320 [ 286.906796][ T30] schedule_timeout+0xb0/0x290 [ 286.911626][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 286.917016][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.923047][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.928348][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.933674][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.938924][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.944175][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.949478][ T30] wait_for_completion+0x355/0x620 [ 286.954646][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 286.960297][ T30] ? synchronize_rcu+0x11b/0x360 [ 286.965291][ T30] ? kthread_unpark+0xd0/0x290 [ 286.970068][ T30] kthread_stop+0x19e/0x640 [ 286.974629][ T30] bch2_copygc_stop+0x4f/0x150 [ 286.979406][ T30] __bch2_fs_read_only+0x47/0x450 [ 286.984509][ T30] bch2_fs_read_only+0xb57/0x1200 [ 286.989555][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 286.995271][ T30] ? __bch2_print+0x17a/0x220 [ 286.999985][ T30] ? down_write+0x18c/0x220 [ 287.004554][ T30] ? __pfx_down_write+0x10/0x10 [ 287.009438][ T30] ? hook_sb_delete+0xaa0/0xbd0 [ 287.014368][ T30] __bch2_fs_stop+0x105/0x5c0 [ 287.019064][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 287.024355][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 287.029391][ T30] ? bch2_sync_fs+0x155/0x300 [ 287.034131][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 287.039367][ T30] generic_shutdown_super+0x139/0x2d0 [ 287.044788][ T30] bch2_kill_sb+0x41/0x50 [ 287.049136][ T30] deactivate_locked_super+0xc4/0x130 [ 287.054557][ T30] cleanup_mnt+0x41f/0x4b0 [ 287.058990][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.064301][ T30] task_work_run+0x24f/0x310 [ 287.068997][ T30] ? __pfx_task_work_run+0x10/0x10 [ 287.074244][ T30] ? path_umount+0x284/0xf70 [ 287.078850][ T30] ptrace_notify+0x2d2/0x380 [ 287.083494][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 287.088622][ T30] ? kmem_cache_free+0x195/0x410 [ 287.093621][ T30] ? __x64_sys_umount+0x123/0x170 [ 287.098663][ T30] syscall_exit_work+0xc7/0x1d0 [ 287.103558][ T30] syscall_exit_to_user_mode+0x24a/0x340 [ 287.109222][ T30] do_syscall_64+0x100/0x230 [ 287.113886][ T30] ? clear_bhb_loop+0x35/0x90 [ 287.118590][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.124587][ T30] RIP: 0033:0x7f763ffb8347 [ 287.129027][ T30] RSP: 002b:00007fff68c1cbc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 287.137512][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f763ffb8347 [ 287.145528][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff68c1cc80 [ 287.153572][ T30] RBP: 00007fff68c1cc80 R08: 0000000000000000 R09: 0000000000000000 [ 287.161589][ T30] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff68c1dce0 [ 287.169598][ T30] R13: 000055555e8e06c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 287.177633][ T30] [ 287.180698][ T30] INFO: task bch-copygc/loop:5828 blocked for more than 143 seconds. [ 287.188828][ T30] Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 287.196515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.205305][ T30] task:bch-copygc/loop state:D stack:18320 pid:5828 tgid:5828 ppid:2 flags:0x00024000 [ 287.215538][ T30] Call Trace: [ 287.218817][ T30] [ 287.221820][ T30] __schedule+0x17fb/0x4be0 [ 287.226347][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.232418][ T30] ? __pfx___schedule+0x10/0x10 [ 287.237283][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.242429][ T30] ? bch2_print_allocator_stuck+0x165/0xcb0 [ 287.248355][ T30] ? bch2_print_allocator_stuck+0xc24/0xcb0 [ 287.254369][ T30] ? schedule+0x90/0x320 [ 287.258631][ T30] schedule+0x14b/0x320 [ 287.262863][ T30] __closure_sync+0x259/0x2f0 [ 287.267569][ T30] ? __closure_sync+0x149/0x2f0 [ 287.272488][ T30] ? __pfx___closure_sync+0x10/0x10 [ 287.277713][ T30] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 287.283497][ T30] __bch2_write+0x562a/0x5dd0 [ 287.288232][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 287.294472][ T30] ? __pfx___bch2_write+0x10/0x10 [ 287.299516][ T30] ? __bch2_read_extent+0x3075/0x4850 [ 287.304961][ T30] ? __pfx___bch2_read_extent+0x10/0x10 [ 287.310537][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 287.316477][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.321569][ T30] bch2_write+0x9b5/0x1760 [ 287.325986][ T30] ? __pfx_bch2_write+0x10/0x10 [ 287.330827][ T30] ? bch2_trans_srcu_unlock+0x43e/0x5c0 [ 287.336441][ T30] ? bch2_data_update_read_done+0xfd/0x330 [ 287.342305][ T30] bch2_data_update_read_done+0x22e/0x330 [ 287.348015][ T30] ? __pfx_bch2_data_update_read_done+0x10/0x10 [ 287.354317][ T30] ? bch2_trans_srcu_unlock+0x44d/0x5c0 [ 287.359898][ T30] bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0 [ 287.366384][ T30] ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10 [ 287.373390][ T30] ? bch2_backpointer_get_key+0x434/0x970 [ 287.379121][ T30] bch2_move_ratelimit+0x76c/0xeb0 [ 287.384271][ T30] ? bch2_move_get_io_opts_one+0x292/0xb90 [ 287.390097][ T30] ? __pfx_bch2_move_ratelimit+0x10/0x10 [ 287.395821][ T30] ? bch2_path_put+0xfe1/0x2150 [ 287.400708][ T30] ? __asan_memset+0x23/0x50 [ 287.405361][ T30] bch2_evacuate_bucket+0x26b3/0x3610 [ 287.410767][ T30] ? bch2_evacuate_bucket+0x30e/0x3610 [ 287.416304][ T30] ? __pfx_bch2_evacuate_bucket+0x10/0x10 [ 287.422112][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.428002][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 287.433705][ T30] ? stack_trace_save+0x118/0x1d0 [ 287.438756][ T30] ? bch2_backpointer_get_key+0x2b0/0x970 [ 287.444533][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.449576][ T30] ? bch2_copygc+0x435/0x4c90 [ 287.454311][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.460306][ T30] bch2_copygc+0x42c1/0x4c90 [ 287.464972][ T30] ? bch2_copygc+0x435/0x4c90 [ 287.469680][ T30] ? __pfx_bch2_copygc+0x10/0x10 [ 287.474666][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 287.479703][ T30] ? __pfx_lock_release+0x10/0x10 [ 287.484788][ T30] ? bch2_copygc+0x435/0x4c90 [ 287.489471][ T30] ? bch2_copygc_wait_amount+0xc90/0xcf0 [ 287.495173][ T30] ? bch2_copygc+0x435/0x4c90 [ 287.499865][ T30] ? bch2_trans_srcu_unlock+0x44d/0x5c0 [ 287.505478][ T30] bch2_copygc_thread+0x736/0xc10 [ 287.510517][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.516124][ T30] ? bch2_copygc_thread+0x1a1/0xc10 [ 287.521424][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 287.527324][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 287.532566][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 287.538489][ T30] ? __kthread_parkme+0x169/0x1d0 [ 287.543568][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.549125][ T30] kthread+0x2f0/0x390 [ 287.553244][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.558801][ T30] ? __pfx_kthread+0x10/0x10 [ 287.563447][ T30] ret_from_fork+0x4b/0x80 [ 287.567874][ T30] ? __pfx_kthread+0x10/0x10 [ 287.572552][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.577340][ T30] [ 287.580353][ T30] [ 287.580353][ T30] Showing all locks held in the system: [ 287.588116][ T30] 1 lock held by khungtaskd/30: [ 287.593011][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 287.602951][ T30] 1 lock held by klogd/5182: [ 287.607554][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 287.617539][ T30] 2 locks held by getty/5570: [ 287.622269][ T30] #0: ffff88814e4e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.632076][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 287.642238][ T30] 2 locks held by syz-executor365/5817: [ 287.647769][ T30] #0: ffff8880353100e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 287.658012][ T30] #1: ffff888075400278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 287.667511][ T30] [ 287.669840][ T30] ============================================= [ 287.669840][ T30] [ 287.678306][ T30] NMI backtrace for cpu 1 [ 287.682652][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 287.693148][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.703199][ T30] Call Trace: [ 287.706485][ T30] [ 287.709413][ T30] dump_stack_lvl+0x241/0x360 [ 287.714097][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.719293][ T30] ? __pfx__printk+0x10/0x10 [ 287.723892][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.728834][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.734304][ T30] ? _printk+0xd5/0x120 [ 287.738456][ T30] ? __pfx__printk+0x10/0x10 [ 287.743043][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.747895][ T30] ? __pfx__printk+0x10/0x10 [ 287.752515][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.758519][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.764503][ T30] watchdog+0xff6/0x1040 [ 287.768742][ T30] ? watchdog+0x1ea/0x1040 [ 287.773158][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.777832][ T30] kthread+0x2f0/0x390 [ 287.781901][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.786574][ T30] ? __pfx_kthread+0x10/0x10 [ 287.791165][ T30] ret_from_fork+0x4b/0x80 [ 287.795580][ T30] ? __pfx_kthread+0x10/0x10 [ 287.800174][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.804955][ T30] [ 287.808038][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.813315][ C0] NMI backtrace for cpu 0 [ 287.813328][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 287.813348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.813358][ C0] Workqueue: 0x0 (events_unbound) [ 287.813380][ C0] RIP: 0010:sched_balance_rq+0x17a9/0x8620 [ 287.813405][ C0] Code: fc ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 0d fd ff ff 4c 89 e7 e8 55 0d 90 00 e9 00 fd ff ff 48 8b 44 24 40 48 8d 58 18 <48> 89 d9 48 c1 e9 03 48 b8 00 00 00 00 00 fc ff df 48 89 8c 24 c8 [ 287.813418][ C0] RSP: 0018:ffffc90000bc7320 EFLAGS: 00000046 [ 287.813431][ C0] RAX: ffff88801d6d8300 RBX: ffff88801d6d8318 RCX: 0000000000000002 [ 287.813443][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 287.813454][ C0] RBP: ffffc90000bc7950 R08: ffffc90000bc76f7 R09: 0000000000000000 [ 287.813465][ C0] R10: ffffc90000bc76a0 R11: fffff52000178edf R12: ffff8880b873f318 [ 287.813477][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8880b8628878 [ 287.813490][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 287.813503][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.813515][ C0] CR2: 000055ff5a773600 CR3: 000000000e736000 CR4: 00000000003526f0 [ 287.813529][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.813539][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.813550][ C0] Call Trace: [ 287.813556][ C0] [ 287.813562][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.813582][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.813601][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.813626][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.813651][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.813674][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.813691][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.813709][ C0] ? sched_balance_rq+0x17a9/0x8620 [ 287.813729][ C0] ? default_do_nmi+0x63/0x160 [ 287.813747][ C0] ? exc_nmi+0x123/0x1f0 [ 287.813763][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.813783][ C0] ? sched_balance_rq+0x17a9/0x8620 [ 287.813804][ C0] ? sched_balance_rq+0x17a9/0x8620 [ 287.813825][ C0] ? sched_balance_rq+0x17a9/0x8620 [ 287.813845][ C0] [ 287.813851][ C0] [ 287.813887][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 287.813917][ C0] ? __lock_acquire+0x1397/0x2100 [ 287.813946][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.813966][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 287.813992][ C0] sched_balance_newidle+0x6ba/0xfd0 [ 287.814011][ C0] ? sched_balance_newidle+0x2c0/0xfd0 [ 287.814030][ C0] ? __pfx_sched_balance_newidle+0x10/0x10 [ 287.814054][ C0] ? dl_server_stop+0x4c/0x90 [ 287.814074][ C0] ? dequeue_entities+0xc75/0x1060 [ 287.814091][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 287.814113][ C0] pick_next_task_fair+0x40/0xc90 [ 287.814139][ C0] __pick_next_task+0xdd/0x400 [ 287.814161][ C0] __schedule+0x776/0x4be0 [ 287.814191][ C0] ? __pfx___schedule+0x10/0x10 [ 287.814210][ C0] ? schedule+0x90/0x320 [ 287.814228][ C0] ? __pfx_lock_release+0x10/0x10 [ 287.814245][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.814264][ C0] ? schedule+0x90/0x320 [ 287.814282][ C0] ? wq_worker_sleeping+0x66/0x240 [ 287.814298][ C0] ? schedule+0x90/0x320 [ 287.814316][ C0] schedule+0x14b/0x320 [ 287.814335][ C0] worker_thread+0xa30/0xd30 [ 287.814357][ C0] ? __kthread_parkme+0x169/0x1d0 [ 287.814374][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.814389][ C0] kthread+0x2f0/0x390 [ 287.814406][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.814420][ C0] ? __pfx_kthread+0x10/0x10 [ 287.814438][ C0] ret_from_fork+0x4b/0x80 [ 287.814453][ C0] ? __pfx_kthread+0x10/0x10 [ 287.814470][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.814498][ C0] [ 287.814506][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.191 msecs [ 287.815315][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 288.201792][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 288.212291][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.222349][ T30] Call Trace: [ 288.225625][ T30] [ 288.228551][ T30] dump_stack_lvl+0x241/0x360 [ 288.233235][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.238435][ T30] ? __pfx__printk+0x10/0x10 [ 288.243020][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.248997][ T30] ? vscnprintf+0x5d/0x90 [ 288.253323][ T30] panic+0x349/0x880 [ 288.257216][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 288.263369][ T30] ? __pfx_panic+0x10/0x10 [ 288.267784][ T30] ? irq_work_queue+0xd1/0x150 [ 288.272721][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.278698][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.284677][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.290657][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 288.296811][ T30] watchdog+0x1035/0x1040 [ 288.301142][ T30] ? watchdog+0x1ea/0x1040 [ 288.305556][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.310227][ T30] kthread+0x2f0/0x390 [ 288.314293][ T30] ? __pfx_watchdog+0x10/0x10 [ 288.318966][ T30] ? __pfx_kthread+0x10/0x10 [ 288.323554][ T30] ret_from_fork+0x4b/0x80 [ 288.327963][ T30] ? __pfx_kthread+0x10/0x10 [ 288.332547][ T30] ret_from_fork_asm+0x1a/0x30 [ 288.337319][ T30] [ 288.340604][ T30] Kernel Offset: disabled [ 288.344920][ T30] Rebooting in 86400 seconds..