./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1987379228 <...> Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. execve("./syz-executor1987379228", ["./syz-executor1987379228"], 0x7ffd99f60560 /* 10 vars */) = 0 brk(NULL) = 0x555583ff6000 brk(0x555583ff6d00) = 0x555583ff6d00 arch_prctl(ARCH_SET_FS, 0x555583ff6380) = 0 set_tid_address(0x555583ff6650) = 5847 set_robust_list(0x555583ff6660, 24) = 0 rseq(0x555583ff6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1987379228", 4096) = 28 getrandom("\xfd\x22\x6d\x2f\x64\xfe\x56\xdd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555583ff6d00 brk(0x555584017d00) = 0x555584017d00 brk(0x555584018000) = 0x555584018000 mprotect(0x7f1aadf35000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.Dg76m4", 0700) = 0 chmod("./syzkaller.Dg76m4", 0777) = 0 chdir("./syzkaller.Dg76m4") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached [pid 5848] set_robust_list(0x555583ff6660, 24) = 0 [pid 5848] chdir("./0" [pid 5847] <... clone resumed>, child_tidptr=0x555583ff6650) = 5848 [pid 5848] <... chdir resumed>) = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5848] write(1, "executing program\n", 18) = 18 [pid 5848] memfd_create("syzkaller", 0) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1aa5a00000 [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5848] munmap(0x7f1aa5a00000, 138412032) = 0 [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5848] close(3) = 0 [pid 5848] close(4) = 0 [pid 5848] mkdir("./file0", 0777) = 0 [ 165.477171][ T5848] loop0: detected capacity change from 0 to 32768 [ 165.565650][ T5848] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 165.581431][ T5848] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 165.603247][ T5848] bcachefs (loop0): accounting_read... done [ 165.610014][ T5848] bcachefs (loop0): alloc_read... done [ 165.615595][ T5848] bcachefs (loop0): stripes_read... done [ 165.621371][ T5848] bcachefs (loop0): snapshots_read... done [ 165.630531][ T5848] bcachefs (loop0): journal_replay... done [ 165.636515][ T5848] bcachefs (loop0): resume_logged_ops... done [ 165.642853][ T5848] bcachefs (loop0): delete_dead_inodes... done [ 165.652125][ T5848] bcachefs (loop0): going read-write [pid 5848] mount("/dev/loop0", "./file0", "bcachefs", 0, "\x10\xf7\xe7\xab\x27\x5e\x7b\x9e\xc1\x8a\x06\x63\x35\x54\xe2\xf6\xfa\xd2\xf9\xfb\xc1\x7a\x1b\x2f\xed\xc7\xf5\x95") = 0 [pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5848] chdir("./file0") = 0 [ 165.660470][ T5848] bcachefs (loop0): done starting filesystem [pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5848] ioctl(4, LOOP_CLR_FD) = 0 [pid 5848] close(4) = 0 [pid 5848] exit_group(0) = ? [pid 5848] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555583ff76f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 165.853251][ T5847] bcachefs (loop0): shutting down [ 165.858434][ T5847] bcachefs (loop0): going read-only [ 165.864110][ T5847] bcachefs (loop0): finished waiting for writes to stop [ 195.731571][ T5858] Allocator stuck? Waited for 30 seconds [ 195.731589][ T5858] Allocator debug: [ 195.731599][ T5858] capacity1536 [ 195.731608][ T5858] reserved 31232 [ 195.731618][ T5858] hidden 0 [ 195.731627][ T5858] btree 0 [ 195.731637][ T5858] data 0 [ 195.731646][ T5858] cached 0 [ 195.731656][ T5858] reserved 0 [ 195.731665][ T5858] online_reserved 24 [ 195.731675][ T5858] nr_inodes 0 [ 195.731684][ T5858] [ 195.731693][ T5858] freelist_wait waiting [ 195.731703][ T5858] open buckets allocated1 [ 195.731712][ T5858] open buckets total 1024 [ 195.731722][ T5858] open_buckets_wait empty [ 195.731731][ T5858] open_buckets_btree 0 [ 195.731741][ T5858] open_buckets_user 0 [ 195.731750][ T5858] btree reserve cache 0 [ 195.731760][ T5858] [ 195.731768][ T5858] Dev 0: [ 195.731777][ T5858] buckets sectors fragmented [ 195.731788][ T5858] free 0 0 0 [ 195.731799][ T5858] sb 0 0 0 [ 195.731810][ T5858] journal 0 0 0 [ 195.731821][ T5858] btree 0 0 0 [ 195.731832][ T5858] user 0 0 0 [ 195.731843][ T5858] cached 0 0 0 [ 195.731854][ T5858] parity 0 0 0 [ 195.731865][ T5858] stripe 0 0 0 [ 195.731877][ T5858] need_gc_gens 0 0 0 [ 195.731888][ T5858] need_discard 0 0 0 [ 195.731899][ T5858] unstriped 0 0 0 [ 195.731910][ T5858] capacity 128 [ 195.731919][ T5858] [ 195.731928][ T5858] reserves: [ 195.731937][ T5858] stripe 60 [ 195.731946][ T5858] normal 58 [ 195.731956][ T5858] copygc 56 [ 195.731966][ T5858] btree 28 [ 195.731975][ T5858] btree_copygc 0 [ 195.731985][ T5858] reclaim 0 [ 195.731994][ T5858] interior_updates 0 [ 195.732004][ T5858] [ 195.732012][ T5858] open buckets 0 [ 195.732022][ T5858] buckets to invalidate 0 [ 195.732032][ T5858] [ 195.732040][ T5858] Copygc debug: [ 195.732049][ T5858] running: 0 [ 195.732058][ T5858] copygc_wait:0 [ 195.732067][ T5858] copygc_wait_at:0 [ 195.732076][ T5858] Currently waiting for:0 B [ 195.732085][ T5858] Currently waiting since:640 KiB [ 195.732095][ T5858] Currently calculated wait:0 B [ 195.732105][ T5858] [ 195.732113][ T5858] Journal debug: [ 195.732122][ T5858] flags: replay_done,running,may_skip_flush,need_flush_write [ 195.732134][ T5858] dirty journal entries: 0/32768 [ 195.732144][ T5858] seq: 13 [ 195.732154][ T5858] seq_ondisk: 13 [ 195.732164][ T5858] last_seq: 14 [ 195.732173][ T5858] last_seq_ondisk: 14 [ 195.732183][ T5858] flushed_seq_ondisk: 13 [ 195.732193][ T5858] watermark: stripe [ 195.732203][ T5858] each entry reserved: 321 [ 195.732212][ T5858] nr flush writes: 0 [ 195.732222][ T5858] nr noflush writes: 0 [ 195.732232][ T5858] average write size: 0 B [ 195.732241][ T5858] nr direct reclaim: 0 [ 195.732251][ T5858] nr background reclaim: 0 [ 195.732261][ T5858] reclaim kicked: 0 [ 195.732270][ T5858] reclaim runs in: 0 ms [ 195.732280][ T5858] blocked: 0 [ 195.732290][ T5858] current entry sectors: 256 [ 195.732299][ T5858] current entry error: ok [ 195.732309][ T5858] current entry: closed [ 195.732319][ T5858] unwritten entries: [ 195.732328][ T5858] last buf closed [ 195.732337][ T5858] space: [ 195.732346][ T5858] discarded 256:1792 [ 195.732356][ T5858] clean ondisk 256:1792 [ 195.732366][ T5858] clean 256:1792 [ 195.732376][ T5858] total 256:2048 [ 195.732386][ T5858] dev 0: [ 195.732395][ T5858] nr 8 [ 195.732405][ T5858] bucket size 256 [ 195.732414][ T5858] available 6:256 [ 195.732424][ T5858] discard_idx 0 [ 195.732434][ T5858] dirty_ondisk 0 (seq 0) [ 195.732444][ T5858] dirty_idx 0 (seq 0) [ 195.732454][ T5858] cur_idx 0 (seq 0) [ 195.732464][ T5858] [ 429.321314][ T30] INFO: task syz-executor198:5847 blocked for more than 143 seconds. [ 429.329625][ T30] Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 429.337954][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.346779][ T30] task:syz-executor198 state:D stack:23840 pid:5847 tgid:5847 ppid:5844 flags:0x00004002 [ 429.357038][ T30] Call Trace: [ 429.360317][ T30] [ 429.363296][ T30] __schedule+0x1850/0x4c30 [ 429.367867][ T30] ? __pfx___schedule+0x10/0x10 [ 429.372776][ T30] ? __pfx_lock_release+0x10/0x10 [ 429.377844][ T30] ? schedule+0x90/0x320 [ 429.382166][ T30] schedule+0x14b/0x320 [ 429.386356][ T30] schedule_timeout+0xb0/0x290 [ 429.391175][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 429.396576][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.402654][ T30] ? wait_for_completion+0x2fe/0x620 [ 429.407976][ T30] ? wait_for_completion+0x2fe/0x620 [ 429.413390][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.418620][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.424321][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 429.429663][ T30] ? wait_for_completion+0x2fe/0x620 [ 429.435003][ T30] wait_for_completion+0x355/0x620 [ 429.440151][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.445883][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 429.451621][ T30] ? synchronize_rcu+0x11b/0x360 [ 429.456602][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.462298][ T30] ? kthread_unpark+0xd0/0x290 [ 429.467109][ T30] kthread_stop+0x19e/0x640 [ 429.471697][ T30] bch2_copygc_stop+0x4f/0x150 [ 429.476498][ T30] __bch2_fs_read_only+0x47/0x450 [ 429.481674][ T30] bch2_fs_read_only+0xb57/0x1200 [ 429.486757][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 429.492269][ T30] ? __bch2_print+0x17a/0x220 [ 429.496989][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.502681][ T30] ? down_write+0x18c/0x220 [ 429.507206][ T30] ? __pfx_down_write+0x10/0x10 [ 429.512107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.517766][ T30] ? hook_sb_delete+0xaa0/0xbd0 [ 429.522685][ T30] __bch2_fs_stop+0x105/0x5c0 [ 429.527402][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 429.532660][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 429.537719][ T30] ? bch2_sync_fs+0x155/0x300 [ 429.542450][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 429.547674][ T30] generic_shutdown_super+0x13b/0x2d0 [ 429.553115][ T30] bch2_kill_sb+0x41/0x50 [ 429.557465][ T30] deactivate_locked_super+0xc6/0x130 [ 429.562910][ T30] cleanup_mnt+0x41f/0x4b0 [ 429.567368][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.573109][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 429.578348][ T30] task_work_run+0x251/0x310 [ 429.583033][ T30] ? __pfx_task_work_run+0x10/0x10 [ 429.588197][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.593900][ T30] ? path_umount+0x284/0xf70 [ 429.598539][ T30] ptrace_notify+0x2d2/0x380 [ 429.603215][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 429.608364][ T30] ? kmem_cache_free+0x195/0x410 [ 429.613376][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.619037][ T30] ? __x64_sys_umount+0x123/0x170 [ 429.624120][ T30] syscall_exit_work+0xc7/0x1d0 [ 429.629013][ T30] syscall_exit_to_user_mode+0x24a/0x340 [ 429.634706][ T30] do_syscall_64+0x100/0x230 [ 429.639338][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.645297][ T30] RIP: 0033:0x7f1aadeb3347 [ 429.649734][ T30] RSP: 002b:00007ffed9345f48 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 429.658201][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1aadeb3347 [ 429.666246][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed9346000 [ 429.674278][ T30] RBP: 00007ffed9346000 R08: 0000000000000000 R09: 0000000000000000 [ 429.682290][ T30] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffed9347060 [ 429.690268][ T30] R13: 0000555583ff76c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 429.698349][ T30] [ 429.701484][ T30] INFO: task bch-copygc/loop:5858 blocked for more than 143 seconds. [ 429.709568][ T30] Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 429.717263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.725989][ T30] task:bch-copygc/loop state:D stack:17192 pid:5858 tgid:5858 ppid:2 flags:0x00024000 [ 429.736255][ T30] Call Trace: [ 429.739565][ T30] [ 429.742565][ T30] __schedule+0x1850/0x4c30 [ 429.747110][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.753173][ T30] ? __pfx___schedule+0x10/0x10 [ 429.758057][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.763768][ T30] ? __pfx_lock_release+0x10/0x10 [ 429.768823][ T30] ? bch2_print_allocator_stuck+0x165/0xcb0 [ 429.774789][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.780445][ T30] ? bch2_print_allocator_stuck+0xc24/0xcb0 [ 429.786412][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.792100][ T30] ? schedule+0x90/0x320 [ 429.796352][ T30] schedule+0x14b/0x320 [ 429.800545][ T30] __closure_sync+0x259/0x2f0 [ 429.805272][ T30] ? __closure_sync+0x149/0x2f0 [ 429.810152][ T30] ? __pfx___closure_sync+0x10/0x10 [ 429.815438][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.821134][ T30] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 429.826867][ T30] __bch2_write+0x562a/0x5dd0 [ 429.831616][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.837297][ T30] ? __pfx_validate_chain+0x10/0x10 [ 429.842622][ T30] ? mark_lock+0x9a/0x360 [ 429.846998][ T30] ? __pfx___bch2_write+0x10/0x10 [ 429.852107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.857775][ T30] ? __pfx_validate_chain+0x10/0x10 [ 429.863043][ T30] ? __pfx_validate_chain+0x10/0x10 [ 429.868281][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.874003][ T30] ? __lock_acquire+0x1397/0x2100 [ 429.879080][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.884812][ T30] bch2_write+0x9b5/0x1760 [ 429.889255][ T30] ? mark_lock+0x9a/0x360 [ 429.893673][ T30] ? __pfx_bch2_write+0x10/0x10 [ 429.898556][ T30] ? bch2_data_update_read_done+0xfd/0x330 [ 429.904432][ T30] bch2_data_update_read_done+0x22e/0x330 [ 429.910190][ T30] ? __pfx_bch2_data_update_read_done+0x10/0x10 [ 429.916505][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.922193][ T30] ? bch2_trans_srcu_unlock+0x57/0x5c0 [ 429.927672][ T30] bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0 [ 429.934245][ T30] ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10 [ 429.941254][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.946893][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 429.952848][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.959206][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 429.964905][ T30] ? finish_wait+0xd4/0x1e0 [ 429.969454][ T30] move_buckets_wait+0x2ba/0x1290 [ 429.974578][ T30] ? __pfx_move_buckets_wait+0x10/0x10 [ 429.980089][ T30] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 429.985806][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 429.991931][ T30] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 429.997657][ T30] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 430.003373][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.009035][ T30] bch2_copygc_thread+0x83f/0xc10 [ 430.014129][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.019794][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 430.025416][ T30] ? bch2_copygc_thread+0x1a1/0xc10 [ 430.030682][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 430.036660][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.042375][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 430.047601][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.053574][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.059235][ T30] ? __kthread_parkme+0x169/0x1d0 [ 430.064333][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 430.069919][ T30] kthread+0x2f2/0x390 [ 430.074076][ T30] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 430.079661][ T30] ? __pfx_kthread+0x10/0x10 [ 430.084350][ T30] ret_from_fork+0x4d/0x80 [ 430.088810][ T30] ? __pfx_kthread+0x10/0x10 [ 430.093485][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.098303][ T30] [ 430.101402][ T30] [ 430.101402][ T30] Showing all locks held in the system: [ 430.109130][ T30] 1 lock held by khungtaskd/30: [ 430.114042][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 430.124040][ T30] 2 locks held by getty/5587: [ 430.128711][ T30] #0: ffff8880312cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.138562][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 430.148815][ T30] 2 locks held by syz-executor198/5847: [ 430.154431][ T30] #0: ffff88807d6b00e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 430.164735][ T30] #1: ffff888076f00278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 430.174273][ T30] [ 430.176597][ T30] ============================================= [ 430.176597][ T30] [ 430.185069][ T30] NMI backtrace for cpu 0 [ 430.189406][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 430.199909][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.209969][ T30] Call Trace: [ 430.213250][ T30] [ 430.216177][ T30] dump_stack_lvl+0x241/0x360 [ 430.220867][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.226108][ T30] ? __pfx__printk+0x10/0x10 [ 430.230799][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 430.235776][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.241243][ T30] ? _printk+0xd5/0x120 [ 430.245419][ T30] ? __pfx__printk+0x10/0x10 [ 430.250022][ T30] ? __wake_up_klogd+0xcc/0x110 [ 430.254885][ T30] ? __pfx__printk+0x10/0x10 [ 430.259496][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.265489][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 430.271506][ T30] watchdog+0xff6/0x1040 [ 430.275772][ T30] ? watchdog+0x1ea/0x1040 [ 430.280204][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.284892][ T30] kthread+0x2f2/0x390 [ 430.288977][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.293669][ T30] ? __pfx_kthread+0x10/0x10 [ 430.298276][ T30] ret_from_fork+0x4d/0x80 [ 430.302704][ T30] ? __pfx_kthread+0x10/0x10 [ 430.307314][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.312102][ T30] [ 430.315274][ T30] Sending NMI from CPU 0 to CPUs 1: [ 430.320508][ C1] NMI backtrace for cpu 1 [ 430.320523][ C1] CPU: 1 UID: 0 PID: 1130 Comm: kworker/u8:7 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 430.320550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.320565][ C1] Workqueue: events_unbound toggle_allocation_gate [ 430.320599][ C1] RIP: 0010:lock_acquire+0x9e/0x550 [ 430.320630][ C1] Code: ec 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2c 43 c7 44 2c 09 f2 f2 f2 00 43 c7 44 2c 11 f3 f3 f3 f3 66 43 c7 44 2c 15 f3 f3 <43> c6 44 2c 17 f3 0f 1f 44 00 00 65 8b 05 ec 16 89 7e 83 f8 08 0f [ 430.320649][ C1] RSP: 0018:ffffc90003f9f4c0 EFLAGS: 00000216 [ 430.320669][ C1] RAX: f2f2f200f1f1f1f1 RBX: ffff88801ac6e060 RCX: 0000000000000000 [ 430.320686][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801ac6e078 [ 430.320702][ C1] RBP: ffffc90003f9f618 R08: 0000000000000001 R09: 0000000000000000 [ 430.320717][ C1] R10: dffffc0000000000 R11: fffffbfff2854911 R12: 1ffff920007f3ea0 [ 430.320735][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920007f3ed8 [ 430.320755][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 430.320775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.320792][ C1] CR2: 000055d6f7e06708 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 430.320811][ C1] Call Trace: [ 430.320819][ C1] [ 430.320828][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 430.320858][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 430.320892][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.320922][ C1] ? nmi_handle+0x2a/0x5a0 [ 430.320962][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 430.320984][ C1] ? nmi_handle+0x151/0x5a0 [ 430.321017][ C1] ? nmi_handle+0x2a/0x5a0 [ 430.321047][ C1] ? lock_acquire+0x9e/0x550 [ 430.321073][ C1] ? default_do_nmi+0x63/0x160 [ 430.321101][ C1] ? exc_nmi+0x123/0x1f0 [ 430.321126][ C1] ? end_repeat_nmi+0xf/0x53 [ 430.321156][ C1] ? lock_acquire+0x9e/0x550 [ 430.321183][ C1] ? lock_acquire+0x9e/0x550 [ 430.321211][ C1] ? lock_acquire+0x9e/0x550 [ 430.321238][ C1] [ 430.321246][ C1] [ 430.321255][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321282][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 430.321309][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321358][ C1] ? rcu_is_watching+0x15/0xb0 [ 430.321392][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321415][ C1] ? ___pte_offset_map+0x2c4/0x380 [ 430.321453][ C1] ? __pfx____pte_offset_map+0x10/0x10 [ 430.321493][ C1] _raw_spin_lock+0x2e/0x40 [ 430.321521][ C1] ? __pte_offset_map_lock+0x1ba/0x300 [ 430.321556][ C1] __pte_offset_map_lock+0x1ba/0x300 [ 430.321596][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 430.321634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321658][ C1] ? walk_to_pmd+0x19b/0x240 [ 430.321690][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321715][ C1] ? __kmalloc_node_track_caller_noprof+0xf8/0x4c0 [ 430.321750][ C1] __text_poke+0x2c5/0xd30 [ 430.321785][ C1] ? __kmalloc_noprof+0xf4/0x4c0 [ 430.321817][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 430.321852][ C1] ? __pfx___text_poke+0x10/0x10 [ 430.321883][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 430.321918][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.321945][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 430.321982][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 430.322016][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.322040][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 430.322070][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.322097][ C1] text_poke_bp_batch+0x8cd/0xb30 [ 430.322138][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 430.322173][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 430.322208][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.322234][ C1] ? srso_alias_return_thunk+0xde/0xfbef5 [ 430.322258][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 430.322297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.322323][ C1] ? process_scheduled_works+0x976/0x1840 [ 430.322349][ C1] text_poke_finish+0x30/0x50 [ 430.322381][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 430.322419][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 430.322456][ C1] static_key_enable+0x1a/0x20 [ 430.322489][ C1] toggle_allocation_gate+0xbc/0x260 [ 430.322519][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 430.322549][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.322586][ C1] process_scheduled_works+0xa68/0x1840 [ 430.322627][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 430.322657][ C1] ? assign_work+0x364/0x3d0 [ 430.322683][ C1] worker_thread+0x870/0xd30 [ 430.322716][ C1] ? __kthread_parkme+0x169/0x1d0 [ 430.322745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.322769][ C1] kthread+0x2f2/0x390 [ 430.322798][ C1] ? __pfx_worker_thread+0x10/0x10 [ 430.322822][ C1] ? __pfx_kthread+0x10/0x10 [ 430.322851][ C1] ret_from_fork+0x4d/0x80 [ 430.322875][ C1] ? __pfx_kthread+0x10/0x10 [ 430.322903][ C1] ret_from_fork_asm+0x1a/0x30 [ 430.322934][ C1] [ 430.322944][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.436 msecs [ 430.324239][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 430.324256][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 430.324285][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 430.324301][ T30] Call Trace: [ 430.324311][ T30] [ 430.324322][ T30] dump_stack_lvl+0x241/0x360 [ 430.324365][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.324403][ T30] ? __pfx__printk+0x10/0x10 [ 430.324436][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 430.324474][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.324503][ T30] ? vscnprintf+0x5d/0x90 [ 430.324537][ T30] panic+0x349/0x880 [ 430.324569][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.324598][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.324633][ T30] ? __pfx_panic+0x10/0x10 [ 430.324663][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 430.324704][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.324731][ T30] ? __irq_work_queue_local+0x137/0x410 [ 430.324770][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.324797][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 430.324828][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 430.324859][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 430.324894][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 430.324921][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 430.324957][ T30] watchdog+0x1035/0x1040 [ 430.324991][ T30] ? watchdog+0x1ea/0x1040 [ 430.325027][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.325058][ T30] kthread+0x2f2/0x390 [ 430.325092][ T30] ? __pfx_watchdog+0x10/0x10 [ 430.325122][ T30] ? __pfx_kthread+0x10/0x10 [ 430.325155][ T30] ret_from_fork+0x4d/0x80 [ 430.325183][ T30] ? __pfx_kthread+0x10/0x10 [ 430.325215][ T30] ret_from_fork_asm+0x1a/0x30 [ 430.325254][ T30] [ 431.004528][ T30] Kernel Offset: disabled [ 431.008856][ T30] Rebooting in 86400 seconds..