./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3783678736 <...> Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. execve("./syz-executor3783678736", ["./syz-executor3783678736"], 0x7ffd070a4320 /* 10 vars */) = 0 brk(NULL) = 0x555585285000 brk(0x555585285d00) = 0x555585285d00 arch_prctl(ARCH_SET_FS, 0x555585285380) = 0 set_tid_address(0x555585285650) = 5242 set_robust_list(0x555585285660, 24) = 0 rseq(0x555585285ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3783678736", 4096) = 28 getrandom("\x62\xc7\xf9\xc5\x1e\x28\x59\x4d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585285d00 brk(0x5555852a6d00) = 0x5555852a6d00 brk(0x5555852a7000) = 0x5555852a7000 mprotect(0x7f04a07e0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.5bl7oz", 0700) = 0 chmod("./syzkaller.5bl7oz", 0777) = 0 chdir("./syzkaller.5bl7oz") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5243 attached , child_tidptr=0x555585285650) = 5243 [pid 5243] set_robust_list(0x555585285660, 24) = 0 [pid 5243] chdir("./0") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5243] write(1, "executing program\n", 18) = 18 [pid 5243] memfd_create("syzkaller", 0) = 3 [pid 5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0498200000 [pid 5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5243] munmap(0x7f0498200000, 138412032) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5243] close(3) = 0 [pid 5243] close(4) = 0 [pid 5243] mkdir("./file0", 0777) = 0 [ 134.124326][ T5243] loop0: detected capacity change from 0 to 32768 [ 134.177456][ T5243] ======================================================= [ 134.177456][ T5243] WARNING: The mand mount option has been deprecated and [ 134.177456][ T5243] and is ignored by this kernel. Remove the mand [ 134.177456][ T5243] option from the mount to silence this warning. [ 134.177456][ T5243] ======================================================= [ 134.258110][ T5243] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 134.277610][ T5243] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 134.294390][ T5243] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 134.294427][ T5243] gen 0 oldest_gen 0 data_type journal [ 134.294436][ T5243] journal_seq 1 [ 134.294444][ T5243] need_discard 1 [ 134.294451][ T5243] need_inc_gen 1 [ 134.294458][ T5243] dirty_sectors 256 [ 134.294466][ T5243] stripe_sectors 0 [ 134.294473][ T5243] cached_sectors 0 [ 134.294480][ T5243] stripe 67108864 [ 134.294488][ T5243] stripe_redundancy 0 [ 134.294495][ T5243] io_time[READ] 1 [ 134.294502][ T5243] io_time[WRITE] 1 [ 134.294509][ T5243] fragmentation 0 [ 134.294516][ T5243] bp_start 8 [ 134.294523][ T5243] [ 134.294530][ T5243] invalid data type (got 2 should be 7): delete?, fixing [ 134.373477][ T5243] bcachefs (loop0): accounting_read... done [ 134.379751][ T5243] bcachefs (loop0): alloc_read... done [ 134.385274][ T5243] bcachefs (loop0): stripes_read... done [ 134.391043][ T5243] bcachefs (loop0): snapshots_read... done [ 134.401348][ T5243] bcachefs (loop0): going read-write [pid 5243] mount("/dev/loop0", "./file0", "bcachefs", MS_NODEV|MS_MANDLOCK, "errors=continue,inodes_32bit,compression=zstd,norecovery,version_upgrade=none,recovery_pass_last=che"...) = 0 [pid 5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5243] chdir("./file0") = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5243] ioctl(4, LOOP_CLR_FD) = 0 [pid 5243] close(4) = 0 [pid 5243] exit_group(0) = ? [ 134.412698][ T5243] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 134.427857][ T5243] bcachefs (loop0): done starting filesystem [pid 5243] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=41 /* 0.41 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x5555852866f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 134.484991][ T5243] syz-executor378 (5243) used greatest stack depth: 17680 bytes left [ 134.523915][ T5242] bcachefs (loop0): shutting down [ 134.529410][ T5242] bcachefs (loop0): going read-only [ 134.534792][ T5242] bcachefs (loop0): finished waiting for writes to stop [ 164.988385][ T5253] Allocator stuck? Waited for 30 seconds [ 164.988401][ T5253] Allocator debug: [ 164.988408][ T5253] capacity1536 [ 164.988433][ T5253] reserved 31232 [ 164.988440][ T5253] hidden 0 [ 164.988448][ T5253] btree 0 [ 164.988455][ T5253] data 0 [ 164.988462][ T5253] cached 0 [ 164.988469][ T5253] reserved 0 [ 164.988476][ T5253] online_reserved 24 [ 164.988483][ T5253] nr_inodes 0 [ 164.988490][ T5253] [ 164.988497][ T5253] freelist_wait waiting [ 164.988504][ T5253] open buckets allocated1 [ 164.988511][ T5253] open buckets total 1024 [ 164.988518][ T5253] open_buckets_wait empty [ 164.988526][ T5253] open_buckets_btree 0 [ 164.988533][ T5253] open_buckets_user 0 [ 164.988540][ T5253] btree reserve cache 0 [ 164.988547][ T5253] [ 164.988553][ T5253] Dev 0: [ 164.988560][ T5253] buckets sectors fragmented [ 164.988568][ T5253] free 0 0 0 [ 164.988577][ T5253] sb 0 0 0 [ 164.988585][ T5253] journal 0 0 0 [ 164.988594][ T5253] btree 0 0 0 [ 164.988602][ T5253] user 0 0 0 [ 164.988611][ T5253] cached 0 0 0 [ 164.988619][ T5253] parity 0 0 0 [ 164.988628][ T5253] stripe 0 0 0 [ 164.988636][ T5253] need_gc_gens 0 0 0 [ 164.988645][ T5253] need_discard 0 0 0 [ 164.988653][ T5253] unstriped 0 0 0 [ 164.988661][ T5253] capacity 128 [ 164.988669][ T5253] [ 164.988675][ T5253] reserves: [ 164.988682][ T5253] stripe 60 [ 164.988689][ T5253] normal 58 [ 164.988696][ T5253] copygc 56 [ 164.988703][ T5253] btree 28 [ 164.988711][ T5253] btree_copygc 0 [ 164.988718][ T5253] reclaim 0 [ 164.988725][ T5253] interior_updates 0 [ 164.988732][ T5253] [ 164.988739][ T5253] open buckets 0 [ 164.988746][ T5253] buckets to invalidate 0 [ 164.988753][ T5253] [ 164.988759][ T5253] Copygc debug: [ 164.988766][ T5253] running: 1 [ 164.988772][ T5253] copygc_wait:0 [ 164.988779][ T5253] copygc_wait_at:0 [ 164.988786][ T5253] Currently waiting for:0 B [ 164.988793][ T5253] Currently waiting since:640 KiB [ 164.988801][ T5253] Currently calculated wait:0 B [ 164.988808][ T5253] [ 164.988814][ T5253] Journal debug: [ 164.988821][ T5253] flags: running,may_skip_flush [ 164.988829][ T5253] dirty journal entries: 0/32768 [ 164.988837][ T5253] seq: 8 [ 164.988844][ T5253] seq_ondisk: 8 [ 164.988851][ T5253] last_seq: 9 [ 164.988858][ T5253] last_seq_ondisk: 8 [ 164.988866][ T5253] flushed_seq_ondisk: 8 [ 164.988873][ T5253] watermark: stripe [ 164.988891][ T5253] each entry reserved: 321 [ 164.988899][ T5253] nr flush writes: 1 [ 164.988906][ T5253] nr noflush writes: 0 [ 164.988913][ T5253] average write size: 1.23 KiB [ 164.988921][ T5253] nr direct reclaim: 0 [ 164.988928][ T5253] nr background reclaim: 0 [ 164.988935][ T5253] reclaim kicked: 0 [ 164.988942][ T5253] reclaim runs in: 0 ms [ 164.988950][ T5253] blocked: 0 [ 164.988957][ T5253] current entry sectors: 256 [ 164.988964][ T5253] current entry error: ok [ 164.988972][ T5253] current entry: closed [ 164.988979][ T5253] unwritten entries: [ 164.988986][ T5253] last buf closed [ 164.988993][ T5253] space: [ 164.988999][ T5253] discarded 256:1536 [ 164.989007][ T5253] clean ondisk 256:1536 [ 164.989014][ T5253] clean 256:1536 [ 164.989022][ T5253] total 256:2048 [ 164.989029][ T5253] dev 0: [ 164.989036][ T5253] nr 8 [ 164.989043][ T5253] bucket size 256 [ 164.989050][ T5253] available 6:248 [ 164.989058][ T5253] discard_idx 0 [ 164.989065][ T5253] dirty_ondisk 0 (seq 8) [ 164.989072][ T5253] dirty_idx 0 (seq 8) [ 164.989080][ T5253] cur_idx 0 (seq 8) [ 164.989087][ T5253] [ 286.577915][ T30] INFO: task syz-executor378:5242 blocked for more than 143 seconds. [ 286.586130][ T30] Not tainted 6.11.0-syzkaller #0 [ 286.591797][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.600629][ T30] task:syz-executor378 state:D stack:23872 pid:5242 tgid:5242 ppid:5239 flags:0x00004002 [ 286.610904][ T30] Call Trace: [ 286.614224][ T30] [ 286.617171][ T30] __schedule+0x17ae/0x4a10 [ 286.621794][ T30] ? __pfx___schedule+0x10/0x10 [ 286.626681][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.631784][ T30] ? schedule+0x90/0x320 [ 286.636061][ T30] schedule+0x14b/0x320 [ 286.640286][ T30] schedule_timeout+0xb0/0x310 [ 286.645083][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 286.650517][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.656540][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.661915][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.667229][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.672495][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.677789][ T30] ? wait_for_completion+0x2fe/0x620 [ 286.683077][ T30] wait_for_completion+0x355/0x620 [ 286.688258][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 286.693918][ T30] ? synchronize_rcu+0x11b/0x360 [ 286.698941][ T30] ? kthread_unpark+0x17b/0x210 [ 286.703825][ T30] kthread_stop+0x19e/0x640 [ 286.708731][ T30] bch2_copygc_stop+0x4f/0x150 [ 286.713548][ T30] __bch2_fs_read_only+0x47/0x430 [ 286.718694][ T30] bch2_fs_read_only+0xb57/0x1220 [ 286.723763][ T30] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 286.729313][ T30] ? __bch2_print+0x17a/0x220 [ 286.734029][ T30] ? down_write+0x18c/0x220 [ 286.738619][ T30] ? __pfx_down_write+0x10/0x10 [ 286.743525][ T30] ? hook_sb_delete+0xa5e/0xb90 [ 286.748449][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.753679][ T30] __bch2_fs_stop+0x105/0x540 [ 286.758437][ T30] ? __pfx_hook_sb_delete+0x10/0x10 [ 286.763665][ T30] ? __pfx___bch2_fs_stop+0x10/0x10 [ 286.768927][ T30] ? __pfx_evict_inodes+0x10/0x10 [ 286.773972][ T30] ? bch2_sync_fs+0x155/0x300 [ 286.778730][ T30] ? __pfx_bch2_put_super+0x10/0x10 [ 286.783952][ T30] generic_shutdown_super+0x136/0x2d0 [ 286.789404][ T30] bch2_kill_sb+0x41/0x50 [ 286.793931][ T30] deactivate_locked_super+0xc4/0x130 [ 286.799409][ T30] cleanup_mnt+0x41f/0x4b0 [ 286.803888][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 286.809164][ T30] task_work_run+0x24f/0x310 [ 286.813787][ T30] ? __pfx_task_work_run+0x10/0x10 [ 286.818993][ T30] ? path_umount+0x284/0xf70 [ 286.823619][ T30] ptrace_notify+0x2d2/0x380 [ 286.828289][ T30] ? __pfx_path_umount+0x10/0x10 [ 286.833287][ T30] ? __pfx_ptrace_notify+0x10/0x10 [ 286.838509][ T30] ? __x64_sys_umount+0x123/0x170 [ 286.843566][ T30] ? __pfx___x64_sys_umount+0x10/0x10 [ 286.849033][ T30] syscall_exit_work+0xc6/0x190 [ 286.853912][ T30] syscall_exit_to_user_mode+0x279/0x370 [ 286.859637][ T30] do_syscall_64+0x100/0x230 [ 286.864315][ T30] ? clear_bhb_loop+0x35/0x90 [ 286.869095][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.875026][ T30] RIP: 0033:0x7f04a0768507 [ 286.879523][ T30] RSP: 002b:00007ffc704dd048 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 286.888026][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f04a0768507 [ 286.896008][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc704dd100 [ 286.904068][ T30] RBP: 00007ffc704dd100 R08: 0000000000000000 R09: 0000000000000000 [ 286.912216][ T30] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc704de170 [ 286.920266][ T30] R13: 00005555852866c0 R14: 431bde82d7b634db R15: 00007ffc704de190 [ 286.928311][ T30] [ 286.931362][ T30] [ 286.931362][ T30] Showing all locks held in the system: [ 286.939168][ T30] 1 lock held by khungtaskd/30: [ 286.944033][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.953985][ T30] 2 locks held by getty/4978: [ 286.958754][ T30] #0: ffff888030d7f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.968615][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 286.978842][ T30] 2 locks held by syz-executor378/5242: [ 286.984414][ T30] #0: ffff888011a3e0e0 (&type->s_umount_key#44){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 286.994717][ T30] #1: ffff888077100278 (&c->state_lock){+.+.}-{3:3}, at: __bch2_fs_stop+0xfd/0x540 [ 287.004255][ T30] [ 287.006579][ T30] ============================================= [ 287.006579][ T30] [ 287.015023][ T30] NMI backtrace for cpu 0 [ 287.019371][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller #0 [ 287.027802][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.037867][ T30] Call Trace: [ 287.041146][ T30] [ 287.044091][ T30] dump_stack_lvl+0x241/0x360 [ 287.048772][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.053965][ T30] ? __pfx__printk+0x10/0x10 [ 287.058547][ T30] ? vprintk_emit+0x667/0x7c0 [ 287.063222][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 287.068247][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 287.073205][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.078662][ T30] ? _printk+0xd5/0x120 [ 287.082810][ T30] ? __pfx__printk+0x10/0x10 [ 287.087393][ T30] ? __wake_up_klogd+0xcc/0x110 [ 287.092240][ T30] ? __pfx__printk+0x10/0x10 [ 287.096844][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.102825][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.108807][ T30] watchdog+0xff4/0x1040 [ 287.113050][ T30] ? watchdog+0x1ea/0x1040 [ 287.117490][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.122168][ T30] kthread+0x2f0/0x390 [ 287.126242][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.130921][ T30] ? __pfx_kthread+0x10/0x10 [ 287.135514][ T30] ret_from_fork+0x4b/0x80 [ 287.139933][ T30] ? __pfx_kthread+0x10/0x10 [ 287.144541][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.149368][ T30] [ 287.152553][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.157854][ C1] NMI backtrace for cpu 1 [ 287.157867][ C1] CPU: 1 UID: 0 PID: 4665 Comm: klogd Not tainted 6.11.0-syzkaller #0 [ 287.157886][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.157897][ C1] RIP: 0010:__free_one_page+0x4/0x8a0 [ 287.157921][ C1] Code: ff ff 4c 89 e7 48 c7 c6 00 f5 f5 8b e8 a5 8b f1 ff 90 0f 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 287.157942][ C1] RSP: 0018:ffffc900030bf310 EFLAGS: 00000046 [ 287.157957][ C1] RAX: 0000000000000004 RBX: ffffea00018c4010 RCX: 0000000000000002 [ 287.157969][ C1] RDX: ffff88813fffa740 RSI: 0000000000063100 RDI: ffffea00018c4000 [ 287.157982][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.157992][ C1] R10: dffffc0000000000 R11: fffff52000617e40 R12: 0000000000000006 [ 287.158004][ C1] R13: ffff8880b8944a00 R14: 0000000000063100 R15: ffffea00018c4000 [ 287.158017][ C1] FS: 00007f38fcd19380(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 287.158032][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.158044][ C1] CR2: 0000557211fbc680 CR3: 0000000063e60000 CR4: 00000000003506f0 [ 287.158060][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.158070][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.158080][ C1] Call Trace: [ 287.158087][ C1] [ 287.158093][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 287.158118][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.158144][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.158167][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.158193][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.158215][ C1] ? nmi_handle+0x14f/0x5a0 [ 287.158232][ C1] ? nmi_handle+0x2a/0x5a0 [ 287.158249][ C1] ? __free_one_page+0x4/0x8a0 [ 287.158267][ C1] ? default_do_nmi+0x63/0x160 [ 287.158291][ C1] ? exc_nmi+0x123/0x1f0 [ 287.158315][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.158344][ C1] ? __free_one_page+0x4/0x8a0 [ 287.158363][ C1] ? __free_one_page+0x4/0x8a0 [ 287.158383][ C1] ? __free_one_page+0x4/0x8a0 [ 287.158413][ C1] [ 287.158419][ C1] [ 287.158424][ C1] free_pcppages_bulk+0x3d3/0x5e0 [ 287.158450][ C1] free_unref_page_commit+0x582/0x1140 [ 287.158476][ C1] ? __pfx_free_unref_page_commit+0x10/0x10 [ 287.158495][ C1] ? page_ext_get+0x1d6/0x2a0 [ 287.158518][ C1] free_unref_page+0x622/0xea0 [ 287.158542][ C1] __put_partials+0xeb/0x130 [ 287.158565][ C1] put_cpu_partial+0x17c/0x250 [ 287.158581][ C1] ? put_cpu_partial+0x70/0x250 [ 287.158601][ C1] __slab_free+0x2ea/0x3d0 [ 287.158620][ C1] ? __phys_addr+0xba/0x170 [ 287.158637][ C1] qlist_free_all+0x9e/0x140 [ 287.158657][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 287.158678][ C1] __kasan_slab_alloc+0x23/0x80 [ 287.158697][ C1] ? __alloc_skb+0x1c3/0x440 [ 287.158716][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 287.158743][ C1] __alloc_skb+0x1c3/0x440 [ 287.158762][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.158791][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 287.158816][ C1] alloc_skb_with_frags+0xc3/0x770 [ 287.158846][ C1] sock_alloc_send_pskb+0x91a/0xa60 [ 287.158881][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 287.158909][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.158933][ C1] unix_dgram_sendmsg+0x6d3/0x1f80 [ 287.158957][ C1] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 287.158986][ C1] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 287.159013][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.159037][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.159059][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 287.159079][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 287.159096][ C1] __sock_sendmsg+0x221/0x270 [ 287.159114][ C1] __sys_sendto+0x3a4/0x4f0 [ 287.159137][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 287.159172][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.159197][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.159224][ C1] __x64_sys_sendto+0xde/0x100 [ 287.159246][ C1] do_syscall_64+0xf3/0x230 [ 287.159265][ C1] ? clear_bhb_loop+0x35/0x90 [ 287.159288][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.159327][ C1] RIP: 0033:0x7f38fce7b9b5 [ 287.159342][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 287.159371][ C1] RSP: 002b:00007ffd24115ca8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.159387][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f38fce7b9b5 [ 287.159398][ C1] RDX: 0000000000000053 RSI: 00005650827b8f60 RDI: 0000000000000003 [ 287.159409][ C1] RBP: 00005650827b4910 R08: 0000000000000000 R09: 0000000000000000 [ 287.159438][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 287.159448][ C1] R13: 00007f38fd009212 R14: 00007ffd24115da8 R15: 0000000000000000 [ 287.159469][ C1] [ 287.159477][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.623 msecs [ 287.159979][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.661099][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller #0 [ 287.669519][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 287.679575][ T30] Call Trace: [ 287.682859][ T30] [ 287.685793][ T30] dump_stack_lvl+0x241/0x360 [ 287.690505][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.695710][ T30] ? __pfx__printk+0x10/0x10 [ 287.700302][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.706319][ T30] ? vscnprintf+0x5d/0x90 [ 287.710659][ T30] panic+0x349/0x860 [ 287.714558][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.720723][ T30] ? __pfx_panic+0x10/0x10 [ 287.725140][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.730528][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.736086][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.741466][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.747631][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.753792][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.759950][ T30] watchdog+0x1033/0x1040 [ 287.764309][ T30] ? watchdog+0x1ea/0x1040 [ 287.768742][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.773426][ T30] kthread+0x2f0/0x390 [ 287.777507][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.782196][ T30] ? __pfx_kthread+0x10/0x10 [ 287.786801][ T30] ret_from_fork+0x4b/0x80 [ 287.791227][ T30] ? __pfx_kthread+0x10/0x10 [ 287.795835][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.800621][ T30] [ 287.803747][ T30] Kernel Offset: disabled [ 287.808097][ T30] Rebooting in 86400 seconds..