./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3808703304 <...> Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. execve("./syz-executor3808703304", ["./syz-executor3808703304"], 0x7ffdcb912dd0 /* 10 vars */) = 0 brk(NULL) = 0x55556f8cd000 brk(0x55556f8cdd00) = 0x55556f8cdd00 arch_prctl(ARCH_SET_FS, 0x55556f8cd380) = 0 set_tid_address(0x55556f8cd650) = 5846 set_robust_list(0x55556f8cd660, 24) = 0 rseq(0x55556f8cdca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3808703304", 4096) = 28 getrandom("\x84\xc6\xbd\x7e\xf9\x72\x23\x55", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556f8cdd00 brk(0x55556f8eed00) = 0x55556f8eed00 brk(0x55556f8ef000) = 0x55556f8ef000 mprotect(0x7f75476ab000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5847 attached , child_tidptr=0x55556f8cd650) = 5847 [pid 5847] set_robust_list(0x55556f8cd660, 24) = 0 [pid 5846] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "10000000000", 11) = 11 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "20", 2) = 2 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "0", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "0", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "100", 3) = 3 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "0", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "0", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "7 4 1 3", 7) = 7 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "0", 1) = 1 [pid 5846] close(3) = 0 [pid 5846] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "5847", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] kill(5847, SIGKILL) = 0 [pid 5847] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5847, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- mkdir("./syzkaller.kwD5H6", 0700) = 0 chmod("./syzkaller.kwD5H6", 0777) = 0 chdir("./syzkaller.kwD5H6") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5849 attached [pid 5849] set_robust_list(0x55556f8cd660, 24) = 0 [pid 5846] <... clone resumed>, child_tidptr=0x55556f8cd650) = 5849 [pid 5849] chdir("./0") = 0 [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5849] setpgid(0, 0) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5849] close(3) = 0 [pid 5849] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5849] write(1, "executing program\n", 18) = 18 [pid 5849] memfd_create("syzkaller", 0) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f753f000000 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5849] munmap(0x7f753f000000, 138412032) = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5849] close(3) = 0 [pid 5849] close(4) = 0 [pid 5849] mkdir("./file0", 0777) = 0 [ 118.858725][ T5849] loop0: detected capacity change from 0 to 32768 [ 118.946734][ T5849] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 118.962483][ T5849] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 118.982630][ T5849] bcachefs (loop0): accounting_read... done [ 118.989447][ T5849] bcachefs (loop0): alloc_read... done [pid 5849] mount("/dev/loop0", "./file0", "bcachefs", 0, "\x10\xf7\xe7\xab\x27\x5e\x7b\x9e\xc1\x8a\x06\x63\x35\x54\xe2\xf6\xfa\xd2\xf9\xfb\xc1\x7a\x1b\x2f\xed\xc7\xf5\x95") = 0 [pid 5849] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5849] chdir("./file0") = 0 [pid 5849] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 118.995489][ T5849] bcachefs (loop0): stripes_read... done [ 119.001463][ T5849] bcachefs (loop0): snapshots_read... done [ 119.009828][ T5849] bcachefs (loop0): journal_replay... done [ 119.015820][ T5849] bcachefs (loop0): resume_logged_ops... done [ 119.022145][ T5849] bcachefs (loop0): delete_dead_inodes... done [ 119.030492][ T5849] bcachefs (loop0): going read-write [ 119.040701][ T5849] bcachefs (loop0): done starting filesystem [pid 5849] ioctl(4, LOOP_CLR_FD) = 0 [pid 5849] close(4) = 0 [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55556f8ce6f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 119.202334][ T5846] bcachefs (loop0): shutting down [ 119.207491][ T5846] bcachefs (loop0): going read-only [ 119.213242][ T5846] bcachefs (loop0): finished waiting for writes to stop [ 149.591539][ T5858] Allocator stuck? Waited for 30 seconds [ 149.591557][ T5858] Allocator debug: [ 149.591566][ T5858] capacity1536 [ 149.591575][ T5858] reserved 31232 [ 149.591585][ T5858] hidden 0 [ 149.591594][ T5858] btree 0 [ 149.591604][ T5858] data 0 [ 149.591613][ T5858] cached 0 [ 149.591622][ T5858] reserved 0 [ 149.591632][ T5858] online_reserved 24 [ 149.591641][ T5858] nr_inodes 0 [ 149.591651][ T5858] [ 149.591659][ T5858] freelist_wait waiting [ 149.591669][ T5858] open buckets allocated1 [ 149.591678][ T5858] open buckets total 1024 [ 149.591687][ T5858] open_buckets_wait empty [ 149.591697][ T5858] open_buckets_btree 0 [ 149.591706][ T5858] open_buckets_user 0 [ 149.591716][ T5858] btree reserve cache 0 [ 149.591725][ T5858] [ 149.591733][ T5858] Dev 0: [ 149.591742][ T5858] buckets sectors fragmented [ 149.591753][ T5858] free 0 0 0 [ 149.591764][ T5858] sb 0 0 0 [ 149.591775][ T5858] journal 0 0 0 [ 149.591786][ T5858] btree 0 0 0 [ 149.591797][ T5858] user 0 0 0 [ 149.591808][ T5858] cached 0 0 0 [ 149.591819][ T5858] parity 0 0 0 [ 149.591830][ T5858] stripe 0 0 0 [ 149.591841][ T5858] need_gc_gens 0 0 0 [ 149.591852][ T5858] need_discard 0 0 0 [ 149.591863][ T5858] unstriped 0 0 0 [ 149.591876][ T5858] capacity 128 [ 149.591887][ T5858] [ 149.591896][ T5858] reserves: [ 149.591904][ T5858] stripe 60 [ 149.591914][ T5858] normal 58 [ 149.591923][ T5858] copygc 56 [ 149.591933][ T5858] btree 28 [ 149.591942][ T5858] btree_copygc 0 [ 149.591952][ T5858] reclaim 0 [ 149.591961][ T5858] interior_updates 0 [ 149.591971][ T5858] [ 149.591979][ T5858] open buckets 0 [ 149.591989][ T5858] buckets to invalidate 0 [ 149.591998][ T5858] [ 149.592007][ T5858] Copygc debug: [ 149.592015][ T5858] running: 1 [ 149.592024][ T5858] copygc_wait:0 [ 149.592033][ T5858] copygc_wait_at:0 [ 149.592042][ T5858] Currently waiting for:0 B [ 149.592052][ T5858] Currently waiting since:640 KiB [ 149.592061][ T5858] Currently calculated wait:0 B [ 149.592071][ T5858] [ 149.592081][ T5858] Journal debug: [ 149.592090][ T5858] flags: replay_done,running,may_skip_flush,need_flush_write [ 149.592102][ T5858] dirty journal entries: 0/32768 [ 149.592112][ T5858] seq: 13 [ 149.592128][ T5858] seq_ondisk: 13 [ 149.592138][ T5858] last_seq: 14 [ 149.592147][ T5858] last_seq_ondisk: 14 [ 149.592157][ T5858] flushed_seq_ondisk: 13 [ 149.592167][ T5858] watermark: stripe [ 149.592176][ T5858] each entry reserved: 321 [ 149.592186][ T5858] nr flush writes: 0 [ 149.592196][ T5858] nr noflush writes: 0 [ 149.592205][ T5858] average write size: 0 B [ 149.592215][ T5858] nr direct reclaim: 0 [ 149.592224][ T5858] nr background reclaim: 0 [ 149.592234][ T5858] reclaim kicked: 0 [ 149.592243][ T5858] reclaim runs in: 0 ms [ 149.592253][ T5858] blocked: 0 [ 149.592263][ T5858] current entry sectors: 256 [ 149.592272][ T5858] current entry error: ok [ 149.592282][ T5858] current entry: closed [ 149.592292][ T5858] unwritten entries: [ 149.592301][ T5858] last buf closed [ 149.592310][ T5858] space: [ 149.592318][ T5858] discarded 256:1792 [ 149.592328][ T5858] clean ondisk 256:1792 [ 149.592338][ T5858] clean 256:1792 [ 149.592348][ T5858] total 256:2048 [ 149.592358][ T5858] dev 0: [ 149.592366][ T5858] nr 8 [ 149.592376][ T5858] bucket size 256 [ 149.592386][ T5858] available 6:256 [ 149.592395][ T5858] discard_idx 0 [ 149.592405][ T5858] dirty_ondisk 0 (seq 0) [ 149.592415][ T5858] dirty_idx 0 (seq 0) [ 149.592425][ T5858] cur_idx 0 (seq 0) [ 149.592435][ T5858] [ 282.060900][ T30] INFO: task syz-executor380:5846 blocked for more than 143 seconds. [ 282.069104][ T30] Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 282.076823][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.085560][ T30] task:syz-executor380 state:D stack:23840 pid:5846 tgid:5846 ppid:5843 flags:0x00004002 [ 282.095895][ T30] Call Trace: [ 282.099199][ T30] [ 282.102175][ T30] __schedule+0x1850/0x4c30 [ 282.106716][ T30] ? __pfx___schedule+0x10/0x10 [ 282.111680][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.116745][ T30] ? schedule+0x90/0x320 [ 282.121048][ T30] schedule+0x14b/0x320 [ 282.125234][ T30] schedule_timeout+0xb0/0x290 [ 282.130001][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 282.135490][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.141548][ T30] ? wait_for_completion+0x2fe/0x620 [ 282.146840][ T30] ? wait_for_completion+0x2fe/0x620 [ 282.152234][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.157482][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.163159][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 282.168387][ T30] ? wait_for_completion+0x2fe/0x620 [ 282.173780][ T30] wait_for_completion+0x355/0x620 [ 282.178924][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.184624][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 282.190288][ T30] ? synchronize_rcu+0x11b/0x360 [ 282.195363][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.201044][ T30] ? kthread_unpark+0xd0/0x290 [ 282.205812][ T30] kthread_stop+0x19e/0x640 [ 282.210315][ T30] bch2_copygc_stop+0x4f/0x150 [ 282.215210][ T30] __bch2_fs_read_only+0x47/0x450 [ 282.220302][ T30] bch2_fs_read_only+0xb57/0x1200 [ 282.225441][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 282.231116][ T30] ? __bch2_print+0x17a/0x220 [ 282.235846][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.241567][ T30] ? down_write+0x18c/0x220 [ 282.246090][ T30] ? __pfx_down_write+0x10/0x10 [ 282.251065][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.256787][ T30] ? hook_sb_delete+0xaa0/0xbd0 [ 282.261712][ T30] __bch2_fs_stop+0x105/0x5c0 [ 282.266484][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 282.271772][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 282.276831][ T30] ? bch2_sync_fs+0x155/0x300 [ 282.281565][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 282.286794][ T30] generic_shutdown_super+0x13b/0x2d0 [ 282.292258][ T30] bch2_kill_sb+0x41/0x50 [ 282.296725][ T30] deactivate_locked_super+0xc6/0x130 [ 282.302196][ T30] cleanup_mnt+0x41f/0x4b0 [ 282.306659][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.312404][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 282.317667][ T30] task_work_run+0x251/0x310 [ 282.322324][ T30] ? __pfx_task_work_run+0x10/0x10 [ 282.327496][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.333193][ T30] ? path_umount+0x284/0xf70 [ 282.337824][ T30] ptrace_notify+0x2d2/0x380 [ 282.342474][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 282.347619][ T30] ? kmem_cache_free+0x195/0x410 [ 282.352668][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.358339][ T30] ? __x64_sys_umount+0x123/0x170 [ 282.363451][ T30] syscall_exit_work+0xc7/0x1d0 [ 282.368352][ T30] syscall_exit_to_user_mode+0x24a/0x340 [ 282.374092][ T30] do_syscall_64+0x100/0x230 [ 282.378749][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.384762][ T30] RIP: 0033:0x7f75476295f7 [ 282.389199][ T30] RSP: 002b:00007ffc61ba5ec8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 282.397750][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f75476295f7 [ 282.405776][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc61ba5f80 [ 282.413820][ T30] RBP: 00007ffc61ba5f80 R08: 0000000000000000 R09: 0000000000000000 [ 282.421930][ T30] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc61ba6fe0 [ 282.429900][ T30] R13: 000055556f8ce6c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 282.437950][ T30] [ 282.441028][ T30] [ 282.441028][ T30] Showing all locks held in the system: [ 282.448752][ T30] 1 lock held by khungtaskd/30: [ 282.453666][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 282.463676][ T30] 1 lock held by klogd/5189: [ 282.468291][ T30] #0: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 282.478325][ T30] 2 locks held by getty/5584: [ 282.483256][ T30] #0: ffff88814d7ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 282.493168][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 282.503575][ T30] 2 locks held by syz-executor380/5846: [ 282.509144][ T30] #0: ffff88807c6f80e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 282.519496][ T30] #1: ffff888073680278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 282.529082][ T30] [ 282.531490][ T30] ============================================= [ 282.531490][ T30] [ 282.539906][ T30] NMI backtrace for cpu 0 [ 282.544228][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 282.554720][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.564773][ T30] Call Trace: [ 282.568053][ T30] [ 282.570978][ T30] dump_stack_lvl+0x241/0x360 [ 282.575693][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.580982][ T30] ? __pfx__printk+0x10/0x10 [ 282.585581][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 282.590540][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 282.596015][ T30] ? _printk+0xd5/0x120 [ 282.600171][ T30] ? __pfx__printk+0x10/0x10 [ 282.604761][ T30] ? __wake_up_klogd+0xcc/0x110 [ 282.609607][ T30] ? __pfx__printk+0x10/0x10 [ 282.614200][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 282.620174][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 282.626155][ T30] watchdog+0xff6/0x1040 [ 282.630399][ T30] ? watchdog+0x1ea/0x1040 [ 282.634815][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.639489][ T30] kthread+0x2f2/0x390 [ 282.643623][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.648306][ T30] ? __pfx_kthread+0x10/0x10 [ 282.652894][ T30] ret_from_fork+0x4d/0x80 [ 282.657306][ T30] ? __pfx_kthread+0x10/0x10 [ 282.661919][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.666702][ T30] [ 282.669883][ T30] Sending NMI from CPU 0 to CPUs 1: [ 282.675162][ C1] NMI backtrace for cpu 1 [ 282.675176][ C1] CPU: 1 UID: 0 PID: 1892 Comm: kworker/u8:6 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 282.675201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.675215][ C1] Workqueue: events_unbound toggle_allocation_gate [ 282.675253][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 282.675281][ C1] Code: 8b 3d 34 ef 8e 0c 48 89 de 5b e9 23 f7 5a 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d6 03 00 65 8b 15 c0 61 64 7e 81 e2 00 01 ff 00 [ 282.675299][ C1] RSP: 0018:ffffc90004eef718 EFLAGS: 00000202 [ 282.675318][ C1] RAX: ffffffff814d3fa1 RBX: ffffea0000000000 RCX: ffffffff931ac203 [ 282.675336][ C1] RDX: ffff888028959e00 RSI: 0000000000000001 RDI: ffffffff81fa4d9a [ 282.675352][ C1] RBP: ffffc90004eef910 R08: ffffffff813f9403 R09: 1ffffffff2032f9e [ 282.675370][ C1] R10: dffffc0000000000 R11: fffffbfff2032f9f R12: 1ffff920009ddf14 [ 282.675387][ C1] R13: dffffc0000000000 R14: ffffffff81fa4d9a R15: ffffffff81fa4d9a [ 282.675407][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 282.675426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.675442][ C1] CR2: 00005630c20f1680 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 282.675460][ C1] Call Trace: [ 282.675467][ C1] [ 282.675476][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 282.675504][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 282.675534][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 282.675560][ C1] ? nmi_handle+0x2a/0x5a0 [ 282.675598][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 282.675620][ C1] ? nmi_handle+0x151/0x5a0 [ 282.675647][ C1] ? nmi_handle+0x2a/0x5a0 [ 282.675676][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 282.675700][ C1] ? default_do_nmi+0x63/0x160 [ 282.675726][ C1] ? exc_nmi+0x123/0x1f0 [ 282.675750][ C1] ? end_repeat_nmi+0xf/0x53 [ 282.675770][ C1] ? kmem_cache_alloc_node_noprof+0x8a/0x380 [ 282.675801][ C1] ? kmem_cache_alloc_node_noprof+0x8a/0x380 [ 282.675835][ C1] ? __text_poke+0x153/0xd30 [ 282.675865][ C1] ? __phys_addr+0x11/0x170 [ 282.675892][ C1] ? kmem_cache_alloc_node_noprof+0x8a/0x380 [ 282.675924][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 282.675948][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 282.675974][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 282.675999][ C1] [ 282.676006][ C1] [ 282.676014][ C1] __phys_addr+0x11/0x170 [ 282.676041][ C1] ? kmem_cache_alloc_node_noprof+0x8a/0x380 [ 282.676071][ C1] __text_poke+0x16d/0xd30 [ 282.676104][ C1] ? kmem_cache_alloc_lru_noprof+0x88/0x390 [ 282.676136][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 282.676170][ C1] ? __pfx___text_poke+0x10/0x10 [ 282.676200][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 282.676239][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.676265][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 282.676300][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 282.676328][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.676365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.676392][ C1] text_poke_bp_batch+0x8cd/0xb30 [ 282.676431][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 282.676465][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 282.676499][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.676524][ C1] ? srso_alias_return_thunk+0xde/0xfbef5 [ 282.676547][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 282.676585][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.676610][ C1] ? process_scheduled_works+0x976/0x1840 [ 282.676634][ C1] text_poke_finish+0x30/0x50 [ 282.676665][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 282.676702][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 282.676738][ C1] static_key_enable+0x1a/0x20 [ 282.676771][ C1] toggle_allocation_gate+0xbc/0x260 [ 282.676799][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 282.676828][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.676864][ C1] process_scheduled_works+0xa68/0x1840 [ 282.676903][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.676932][ C1] ? assign_work+0x364/0x3d0 [ 282.676956][ C1] worker_thread+0x870/0xd30 [ 282.676989][ C1] ? __kthread_parkme+0x169/0x1d0 [ 282.677016][ C1] ? __pfx_worker_thread+0x10/0x10 [ 282.677040][ C1] kthread+0x2f2/0x390 [ 282.677067][ C1] ? __pfx_worker_thread+0x10/0x10 [ 282.677090][ C1] ? __pfx_kthread+0x10/0x10 [ 282.677119][ C1] ret_from_fork+0x4d/0x80 [ 282.677141][ C1] ? __pfx_kthread+0x10/0x10 [ 282.677169][ C1] ret_from_fork_asm+0x1a/0x30 [ 282.677200][ C1] [ 282.678207][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 282.678223][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 282.678251][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.678267][ T30] Call Trace: [ 282.678276][ T30] [ 282.678288][ T30] dump_stack_lvl+0x241/0x360 [ 282.678330][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.678368][ T30] ? __pfx__printk+0x10/0x10 [ 282.678400][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.678438][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.678465][ T30] ? vscnprintf+0x5d/0x90 [ 282.678498][ T30] panic+0x349/0x880 [ 282.678528][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.678556][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.678590][ T30] ? __pfx_panic+0x10/0x10 [ 282.678621][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 282.678662][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.678688][ T30] ? __irq_work_queue_local+0x137/0x410 [ 282.678720][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.678746][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 282.678777][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 282.678809][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 282.678843][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.678869][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 282.678904][ T30] watchdog+0x1035/0x1040 [ 282.678937][ T30] ? watchdog+0x1ea/0x1040 [ 282.678978][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.679009][ T30] kthread+0x2f2/0x390 [ 282.679041][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.679071][ T30] ? __pfx_kthread+0x10/0x10 [ 282.679105][ T30] ret_from_fork+0x4d/0x80 [ 282.679132][ T30] ? __pfx_kthread+0x10/0x10 [ 282.679164][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.679202][ T30] [ 283.302700][ T30] Kernel Offset: disabled [ 283.307020][ T30] Rebooting in 86400 seconds..