./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3808285000 <...> Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. execve("./syz-executor3808285000", ["./syz-executor3808285000"], 0x7ffe545b5c70 /* 10 vars */) = 0 brk(NULL) = 0x555568abd000 brk(0x555568abdd00) = 0x555568abdd00 arch_prctl(ARCH_SET_FS, 0x555568abd380) = 0 set_tid_address(0x555568abd650) = 5235 set_robust_list(0x555568abd660, 24) = 0 rseq(0x555568abdca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3808285000", 4096) = 28 getrandom("\x91\x73\x7b\xb8\x74\x9e\xdc\xb6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568abdd00 brk(0x555568aded00) = 0x555568aded00 brk(0x555568adf000) = 0x555568adf000 mprotect(0x7f50440d2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.fIKJKZ", 0700) = 0 chmod("./syzkaller.fIKJKZ", 0777) = 0 chdir("./syzkaller.fIKJKZ") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5236 attached [pid 5236] set_robust_list(0x555568abd660, 24 [pid 5235] <... clone resumed>, child_tidptr=0x555568abd650) = 5236 [pid 5236] <... set_robust_list resumed>) = 0 [pid 5236] chdir("./0") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5236] write(1, "executing program\n", 18executing program ) = 18 [pid 5236] memfd_create("syzkaller", 0) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f503bc00000 [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5236] munmap(0x7f503bc00000, 138412032) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5236] close(3) = 0 [pid 5236] close(4) = 0 [pid 5236] mkdir("./file1", 0777) = 0 [ 131.094057][ T5236] loop0: detected capacity change from 0 to 32768 [ 131.178024][ T5236] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 131.196932][ T5236] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 131.213503][ T5236] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 131.213524][ T5236] gen 0 oldest_gen 0 data_type journal [ 131.213533][ T5236] journal_seq 1 [ 131.213541][ T5236] need_discard 1 [ 131.213549][ T5236] need_inc_gen 1 [ 131.213557][ T5236] dirty_sectors 256 [ 131.213565][ T5236] stripe_sectors 0 [ 131.213572][ T5236] cached_sectors 0 [ 131.213593][ T5236] stripe 67108864 [ 131.213601][ T5236] stripe_redundancy 0 [ 131.213608][ T5236] io_time[READ] 1 [ 131.213616][ T5236] io_time[WRITE] 1 [ 131.213623][ T5236] fragmentation 0 [ 131.213631][ T5236] bp_start 8 [ 131.213638][ T5236] [ 131.213645][ T5236] invalid data type (got 2 should be 7): delete?, fixing [ 131.291519][ T5236] bcachefs (loop0): flagging btree lru lost data [ 131.300942][ T5236] error reading btree root lru l=0: btree_node_read_error, fixing [ 131.308949][ T5236] bcachefs (loop0): will run btree node scan [ 131.318788][ T5236] bcachefs (loop0): scan_for_btree_nodes... [ 131.323368][ T5236] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 131.323387][ T5236] extents l=0 seq=1 journal_seq=4 cookie=b77ad9ee5a61c7f0 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 131.323398][ T5236] xattrs l=0 seq=1 journal_seq=4 cookie=1477538288e6fe55 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 131.323408][ T5236] lru l=0 seq=1 journal_seq=0 cookie=d19400031ca39bdb POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 131.323418][ T5236] deleted_inodes l=0 seq=1 journal_seq=0 cookie=a34c10fbe2d33ffa POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 131.323429][ T5236] [ 131.381403][ T5236] done [ 131.384212][ T5236] bcachefs (loop0): check_topology... [ 131.384249][ T5236] bcachefs (loop0): btree root lru unreadable, must recover from scan [ 131.398294][ T5236] bcachefs (loop0): bch2_get_scanned_nodes(): recovering lru l=0 POS_MIN - SPOS_MAX [ 131.407889][ T5236] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19400031ca39bdb written 8 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 131.428729][ T41] bcachefs (loop0): error validating btree node on loop0 at btree lru level 0/0 [ 131.428750][ T41] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19400031ca39bdb written 8 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 131.428763][ T41] node offset 0/8 bset u64s 0: checksum error, type crc32c_nonzero: got 7eade854 should be 7fc9b784, fixing [ 131.464247][ T41] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=lru level=0 SPOS_MAX due to error [ 131.476802][ T5236] done [pid 5236] mount("/dev/loop0", "./file1", "bcachefs", MS_REC|MS_I_VERSION, "errors=continue,inodes_32bit,compression=zstd,norecovery,version_upgrade=none,recovery_pass_last=che"...) = 0 [pid 5236] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5236] chdir("./file1") = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 131.479637][ T5236] bcachefs (loop0): accounting_read... done [ 131.486140][ T5236] bcachefs (loop0): alloc_read... done [ 131.491768][ T5236] bcachefs (loop0): stripes_read... done [ 131.497581][ T5236] bcachefs (loop0): snapshots_read... done [ 131.507121][ T5236] bcachefs (loop0): going read-write [ 131.523221][ T5236] bcachefs (loop0): done starting filesystem [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=46 /* 0.46 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 131.592077][ T5236] syz-executor380 (5236) used greatest stack depth: 17616 bytes left getdents64(3, 0x555568abe6f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 131.726962][ T5235] bcachefs (loop0): shutting down [ 131.732160][ T5235] bcachefs (loop0): going read-only [ 161.806937][ T61] Allocator stuck? Waited for 30 seconds [ 161.806959][ T61] Allocator debug: [ 161.806967][ T61] capacity1536 [ 161.806975][ T61] reserved 31232 [ 161.806983][ T61] hidden 0 [ 161.806991][ T61] btree 0 [ 161.806998][ T61] data 0 [ 161.807006][ T61] cached 0 [ 161.807014][ T61] reserved 0 [ 161.807021][ T61] online_reserved 512 [ 161.807029][ T61] nr_inodes 0 [ 161.807037][ T61] [ 161.807044][ T61] freelist_wait waiting [ 161.807052][ T61] open buckets allocated1 [ 161.807060][ T61] open buckets total 1024 [ 161.807068][ T61] open_buckets_wait empty [ 161.807075][ T61] open_buckets_btree 0 [ 161.807083][ T61] open_buckets_user 0 [ 161.807091][ T61] btree reserve cache 0 [ 161.807098][ T61] [ 161.807105][ T61] Dev 0: [ 161.807112][ T61] buckets sectors fragmented [ 161.807121][ T61] free 0 0 0 [ 161.807131][ T61] sb 0 0 0 [ 161.807140][ T61] journal 0 0 0 [ 161.807149][ T61] btree 0 0 0 [ 161.807158][ T61] user 0 0 0 [ 161.807167][ T61] cached 0 0 0 [ 161.807176][ T61] parity 0 0 0 [ 161.807185][ T61] stripe 0 0 0 [ 161.807194][ T61] need_gc_gens 0 0 0 [ 161.807203][ T61] need_discard 0 0 0 [ 161.807212][ T61] unstriped 0 0 0 [ 161.807221][ T61] capacity 128 [ 161.807228][ T61] [ 161.807235][ T61] reserves: [ 161.807243][ T61] stripe 60 [ 161.807250][ T61] normal 58 [ 161.807258][ T61] copygc 56 [ 161.807266][ T61] btree 28 [ 161.807274][ T61] btree_copygc 0 [ 161.807282][ T61] reclaim 0 [ 161.807298][ T61] interior_updates 0 [ 161.807306][ T61] [ 161.807313][ T61] open buckets 0 [ 161.807321][ T61] buckets to invalidate 0 [ 161.807329][ T61] [ 161.807336][ T61] Copygc debug: [ 161.807343][ T61] running: 0 [ 161.807350][ T61] copygc_wait:0 [ 161.807357][ T61] copygc_wait_at:0 [ 161.807365][ T61] Currently waiting for:0 B [ 161.807373][ T61] Currently waiting since:640 KiB [ 161.807381][ T61] Currently calculated wait:0 B [ 161.807389][ T61] [ 161.807395][ T61] Journal debug: [ 161.807403][ T61] flags: running,may_skip_flush [ 161.807411][ T61] dirty journal entries: 0/32768 [ 161.807420][ T61] seq: 8 [ 161.807427][ T61] seq_ondisk: 8 [ 161.807435][ T61] last_seq: 9 [ 161.807443][ T61] last_seq_ondisk: 8 [ 161.807451][ T61] flushed_seq_ondisk: 8 [ 161.807459][ T61] watermark: stripe [ 161.807467][ T61] each entry reserved: 321 [ 161.807475][ T61] nr flush writes: 1 [ 161.807482][ T61] nr noflush writes: 0 [ 161.807490][ T61] average write size: 1.13 KiB [ 161.807498][ T61] nr direct reclaim: 0 [ 161.807506][ T61] nr background reclaim: 0 [ 161.807514][ T61] reclaim kicked: 0 [ 161.807522][ T61] reclaim runs in: 0 ms [ 161.807530][ T61] blocked: 0 [ 161.807537][ T61] current entry sectors: 256 [ 161.807545][ T61] current entry error: ok [ 161.807553][ T61] current entry: closed [ 161.807561][ T61] unwritten entries: [ 161.807569][ T61] last buf closed [ 161.807576][ T61] space: [ 161.807583][ T61] discarded 256:1536 [ 161.807591][ T61] clean ondisk 256:1536 [ 161.807599][ T61] clean 256:1536 [ 161.807607][ T61] total 256:2048 [ 161.807615][ T61] dev 0: [ 161.807623][ T61] nr 8 [ 161.807630][ T61] bucket size 256 [ 161.807638][ T61] available 6:248 [ 161.807646][ T61] discard_idx 0 [ 161.807654][ T61] dirty_ondisk 0 (seq 8) [ 161.807662][ T61] dirty_idx 0 (seq 8) [ 161.807670][ T61] cur_idx 0 (seq 8) [ 161.807678][ T61] [ 286.597749][ T30] INFO: task syz-executor380:5235 blocked for more than 143 seconds. [ 286.606066][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 286.613440][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.622210][ T30] task:syz-executor380 state:D stack:23872 pid:5235 tgid:5235 ppid:5232 flags:0x00004002 [ 286.632504][ T30] Call Trace: [ 286.635946][ T30] [ 286.638905][ T30] __schedule+0x1843/0x4ae0 [ 286.643438][ T30] ? __pfx___schedule+0x10/0x10 [ 286.648354][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.653418][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 286.659597][ T30] ? __pfx___bch2_print+0x10/0x10 [ 286.664666][ T30] ? schedule+0x90/0x320 [ 286.668970][ T30] schedule+0x14b/0x320 [ 286.673176][ T30] bch2_fs_read_only+0xa86/0x1220 [ 286.678360][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 286.683856][ T30] ? __bch2_print+0x17a/0x220 [ 286.688646][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 286.694751][ T30] ? down_write+0x18c/0x220 [ 286.699781][ T30] ? __pfx_down_write+0x10/0x10 [ 286.704690][ T30] ? hook_sb_delete+0xa7f/0xbb0 [ 286.709616][ T30] __bch2_fs_stop+0x105/0x540 [ 286.714328][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 286.719777][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 286.724847][ T30] ? bch2_sync_fs+0x155/0x300 [ 286.729593][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 286.734852][ T30] generic_shutdown_super+0x139/0x2d0 [ 286.740497][ T30] bch2_kill_sb+0x41/0x50 [ 286.744886][ T30] deactivate_locked_super+0xc4/0x130 [ 286.750344][ T30] cleanup_mnt+0x41f/0x4b0 [ 286.754958][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.760332][ T30] task_work_run+0x24f/0x310 [ 286.765060][ T30] ? __pfx_task_work_run+0x10/0x10 [ 286.770279][ T30] ? path_umount+0x284/0xf70 [ 286.774945][ T30] ptrace_notify+0x2d2/0x380 [ 286.779750][ T30] ? __pfx_path_umount+0x10/0x10 [ 286.784750][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 286.790035][ T30] ? __x64_sys_umount+0x123/0x170 [ 286.795093][ T30] ? __pfx___x64_sys_umount+0x10/0x10 [ 286.800698][ T30] syscall_exit_work+0xc6/0x190 [ 286.805596][ T30] syscall_exit_to_user_mode+0x279/0x370 [ 286.811303][ T30] do_syscall_64+0x100/0x230 [ 286.816034][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.820747][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.826721][ T30] RIP: 0033:0x7f5044059387 [ 286.831171][ T30] RSP: 002b:00007fffa46cc3a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 286.839775][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5044059387 [ 286.847825][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa46cc460 [ 286.855883][ T30] RBP: 00007fffa46cc460 R08: 0000000000000000 R09: 0000000000000000 [ 286.863877][ T30] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fffa46cd4c0 [ 286.871910][ T30] R13: 0000555568abe6c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 286.880063][ T30] [ 286.883200][ T30] [ 286.883200][ T30] Showing all locks held in the system: [ 286.891012][ T30] 5 locks held by kworker/u8:0/11: [ 286.896234][ T30] 1 lock held by khungtaskd/30: [ 286.901107][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.911111][ T30] 4 locks held by kworker/u8:4/61: [ 286.916318][ T30] #0: ffff888012bc9148 ((wq_completion)btree_node_rewrite){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.928774][ T30] #1: ffffc900015c7d00 ((work_completion)(&a->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.940390][ T30] #2: ffff8880724042c0 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7de/0xd20 [ 286.950913][ T30] #3: ffff888072426690 (&c->gc_lock){.+.+}-{3:3}, at: bch2_btree_update_start+0x682/0x14e0 [ 286.961206][ T30] 2 locks held by getty/4976: [ 286.965955][ T30] #0: ffff88803298a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.975861][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 286.986034][ T30] 2 locks held by syz-executor380/5235: [ 286.991606][ T30] #0: ffff88802e0f20e0 (&type->s_umount_key#44){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 287.001950][ T30] #1: ffff888072400278 (&c->state_lock){+.+.}-{3:3}, at: __bch2_fs_stop+0xfd/0x540 [ 287.011479][ T30] [ 287.013805][ T30] ============================================= [ 287.013805][ T30] [ 287.022362][ T30] NMI backtrace for cpu 1 [ 287.026717][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 287.036916][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.047105][ T30] Call Trace: [ 287.050396][ T30] [ 287.053337][ T30] dump_stack_lvl+0x241/0x360 [ 287.058033][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.063333][ T30] ? __pfx__printk+0x10/0x10 [ 287.067945][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.072904][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.078380][ T30] ? _printk+0xd5/0x120 [ 287.082548][ T30] ? __pfx__printk+0x10/0x10 [ 287.087153][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.092021][ T30] ? __pfx__printk+0x10/0x10 [ 287.096625][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 287.101684][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.107688][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.113776][ T30] watchdog+0xff4/0x1040 [ 287.118043][ T30] ? watchdog+0x1ea/0x1040 [ 287.122478][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.127692][ T30] kthread+0x2f0/0x390 [ 287.131767][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.136468][ T30] ? __pfx_kthread+0x10/0x10 [ 287.141063][ T30] ret_from_fork+0x4b/0x80 [ 287.145516][ T30] ? __pfx_kthread+0x10/0x10 [ 287.150141][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.154946][ T30] [ 287.158112][ T30] Sending NMI from CPU 1 to CPUs 0: [ 287.163384][ C0] NMI backtrace for cpu 0 [ 287.163400][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 287.163420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.163432][ C0] Workqueue: events_unbound toggle_allocation_gate [ 287.163464][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 287.163486][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ec 56 80 00 48 c7 c3 98 7e 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 22 8b 03 65 ff 0d 11 3f 89 7e 74 10 83 e0 04 c1 e8 02 5b [ 287.163506][ C0] RSP: 0018:ffffc90000107618 EFLAGS: 00000802 [ 287.163521][ C0] RAX: 0000000000000000 RBX: ffff8880b8637e98 RCX: ffffffff8142d66f [ 287.163534][ C0] RDX: 0000000000000000 RSI: ffffffff8c5ffc60 RDI: ffffffff8c5ffc20 [ 287.163547][ C0] RBP: ffffc90000107730 R08: ffffffff901b4b2f R09: 1ffffffff2036965 [ 287.163560][ C0] R10: dffffc0000000000 R11: fffffbfff2036966 R12: 0000000000000000 [ 287.163572][ C0] R13: dffffc0000000000 R14: ffffffff8e2faa50 R15: dffffc0000000000 [ 287.163586][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 287.163600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.163613][ C0] CR2: 0000557aa7895600 CR3: 000000000e734000 CR4: 00000000003506f0 [ 287.163628][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.163639][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.163650][ C0] Call Trace: [ 287.163656][ C0] [ 287.163663][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.163691][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 287.163719][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.163745][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.163769][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.163792][ C0] ? nmi_handle+0x14f/0x5a0 [ 287.163808][ C0] ? nmi_handle+0x2a/0x5a0 [ 287.163826][ C0] ? rcu_is_watching+0x5a/0xb0 [ 287.163843][ C0] ? default_do_nmi+0x63/0x160 [ 287.163860][ C0] ? exc_nmi+0x123/0x1f0 [ 287.163886][ C0] ? end_repeat_nmi+0xf/0x53 [ 287.163910][ C0] ? trace_tlb_flush+0x2f/0x140 [ 287.163928][ C0] ? rcu_is_watching+0x5a/0xb0 [ 287.163946][ C0] ? rcu_is_watching+0x5a/0xb0 [ 287.163965][ C0] ? rcu_is_watching+0x5a/0xb0 [ 287.163983][ C0] [ 287.163989][ C0] [ 287.163996][ C0] trace_tlb_flush+0x3e/0x140 [ 287.164014][ C0] switch_mm_irqs_off+0x7b0/0xb00 [ 287.164033][ C0] ? text_poke_memcpy+0x25/0x30 [ 287.164053][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 287.164070][ C0] ? text_poke_memcpy+0x25/0x30 [ 287.164090][ C0] ? __asan_memcpy+0x40/0x70 [ 287.164111][ C0] __text_poke+0x8f0/0xd30 [ 287.164130][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 287.164151][ C0] ? __kmalloc_cache_noprof+0x84/0x2c0 [ 287.164169][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 287.164191][ C0] ? __pfx___text_poke+0x10/0x10 [ 287.164209][ C0] ? __kmalloc_node_track_caller_noprof+0xf2/0x440 [ 287.164238][ C0] ? perf_event_text_poke+0x258/0x330 [ 287.164260][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 287.164277][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 287.164297][ C0] ? __pfx___might_resched+0x10/0x10 [ 287.164327][ C0] text_poke_bp_batch+0x59c/0xb30 [ 287.164359][ C0] ? __kmalloc_cache_noprof+0x84/0x2c0 [ 287.164375][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 287.164400][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 287.164427][ C0] ? process_scheduled_works+0x976/0x1850 [ 287.164451][ C0] text_poke_finish+0x30/0x50 [ 287.164471][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 287.164495][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 287.164520][ C0] static_key_disable+0x1a/0x20 [ 287.164541][ C0] toggle_allocation_gate+0x1bf/0x260 [ 287.164566][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 287.164591][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.164623][ C0] process_scheduled_works+0xa63/0x1850 [ 287.164661][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.164689][ C0] ? assign_work+0x364/0x3d0 [ 287.164714][ C0] worker_thread+0x870/0xd30 [ 287.164745][ C0] ? __kthread_parkme+0x169/0x1d0 [ 287.164772][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.164796][ C0] kthread+0x2f0/0x390 [ 287.164812][ C0] ? __pfx_worker_thread+0x10/0x10 [ 287.164835][ C0] ? __pfx_kthread+0x10/0x10 [ 287.164852][ C0] ret_from_fork+0x4b/0x80 [ 287.164875][ C0] ? __pfx_kthread+0x10/0x10 [ 287.164891][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.164924][ C0] [ 287.164931][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.548 msecs [ 287.165380][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.618469][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 287.628651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.638721][ T30] Call Trace: [ 287.642011][ T30] [ 287.644964][ T30] dump_stack_lvl+0x241/0x360 [ 287.649748][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.654963][ T30] ? __pfx__printk+0x10/0x10 [ 287.659562][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.665657][ T30] ? vscnprintf+0x5d/0x90 [ 287.670009][ T30] panic+0x349/0x880 [ 287.673918][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.680179][ T30] ? __pfx_panic+0x10/0x10 [ 287.684616][ T30] ? __pfx_delay_tsc+0x10/0x10 [ 287.689401][ T30] ? irq_work_queue+0xd1/0x150 [ 287.694173][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.700192][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.706218][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.712211][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 287.718389][ T30] watchdog+0x1033/0x1040 [ 287.722821][ T30] ? watchdog+0x1ea/0x1040 [ 287.727268][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.731987][ T30] kthread+0x2f0/0x390 [ 287.736083][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.740778][ T30] ? __pfx_kthread+0x10/0x10 [ 287.745381][ T30] ret_from_fork+0x4b/0x80 [ 287.749814][ T30] ? __pfx_kthread+0x10/0x10 [ 287.754418][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.759217][ T30] [ 287.762662][ T30] Kernel Offset: disabled [ 287.766998][ T30] Rebooting in 86400 seconds..