./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3367388711 <...> Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. execve("./syz-executor3367388711", ["./syz-executor3367388711"], 0x7ffe0d65a720 /* 10 vars */) = 0 brk(NULL) = 0x55559006c000 brk(0x55559006cd00) = 0x55559006cd00 arch_prctl(ARCH_SET_FS, 0x55559006c380) = 0 set_tid_address(0x55559006c650) = 5837 set_robust_list(0x55559006c660, 24) = 0 rseq(0x55559006cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3367388711", 4096) = 28 getrandom("\x0c\xf9\x75\x90\xd5\xcb\x60\x65", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55559006cd00 brk(0x55559008dd00) = 0x55559008dd00 brk(0x55559008e000) = 0x55559008e000 mprotect(0x7f091a515000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached [pid 5838] set_robust_list(0x55559006c660, 24) = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5837] <... clone resumed>, child_tidptr=0x55559006c650) = 5838 [pid 5838] <... prctl resumed>) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 executing program [pid 5838] write(1, "executing program\n", 18) = 18 [pid 5838] memfd_create("syzkaller", 0) = 3 [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0912000000 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5838] munmap(0x7f0912000000, 138412032) = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5838] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5838] close(3) = 0 [pid 5838] close(4) = 0 [pid 5838] mkdir("./file0", 0777) = 0 [ 90.340372][ T5838] loop0: detected capacity change from 0 to 32768 [ 90.425863][ T5838] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,nojournal_transaction_names,version_upgrade=none [ 90.425863][ T5838] allowing incompatible features above 0.0: (unknown version) [ 90.453456][ T5838] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 90.475699][ T5838] bcachefs (loop0): accounting_read... done [ 90.482894][ T5838] bcachefs (loop0): alloc_read... done [ 90.489074][ T5838] bcachefs (loop0): snapshots_read... done [ 90.498339][ T5838] bcachefs (loop0): going read-write [ 90.507786][ T5838] bcachefs (loop0): journal_replay... done [ 90.514129][ T5838] bcachefs (loop0): resume_logged_ops... done [ 90.520608][ T5838] bcachefs (loop0): delete_dead_inodes... done [pid 5838] mount("/dev/loop0", "./file0", "bcachefs", 0, "version_upgrade=none,background_compression=lz4,") = 0 [pid 5838] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5838] chdir("./file0") = 0 [pid 5838] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5838] ioctl(4, LOOP_CLR_FD) = 0 [pid 5838] close(4) = 0 [ 90.528980][ T5838] bcachefs (loop0): done starting filesystem [ 90.537619][ T5848] bcachefs (loop0): backpointer doesn't match extent it points to: [ 90.537638][ T5848] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 90.537651][ T5848] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 90.537665][ T5848] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5838] openat(AT_FDCWD, "cpuacct.usage_percpu", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5837] kill(-5838, SIGKILL) = 0 [pid 5837] kill(5838, SIGKILL) = 0 [ 97.131497][ T10] cfg80211: failed to load regulatory.db [pid 5837] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5837] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5837] getdents64(3, 0x55559006d6f0 /* 2 entries */, 32768) = 48 [pid 5837] getdents64(3, 0x55559006d6f0 /* 0 entries */, 32768) = 0 [pid 5837] close(3) = 0 [ 122.100910][ T5838] Allocator stuck? Waited for 30 seconds [ 122.100939][ T5838] Allocator debug: [ 122.100950][ T5838] capacity1536 [ 122.100961][ T5838] reserved 31232 [ 122.100972][ T5838] hidden 0 [ 122.100983][ T5838] btree 0 [ 122.100993][ T5838] data 0 [ 122.101036][ T5838] cached 0 [ 122.101047][ T5838] reserved 0 [ 122.101058][ T5838] online_reserved 768 [ 122.101068][ T5838] nr_inodes 0 [ 122.101079][ T5838] [ 122.101089][ T5838] freelist_wait waiting [ 122.101100][ T5838] open buckets allocated1 [ 122.101110][ T5838] open buckets total 1024 [ 122.101121][ T5838] open_buckets_wait empty [ 122.101132][ T5838] open_buckets_btree 0 [ 122.101142][ T5838] open_buckets_user 0 [ 122.101154][ T5838] btree reserve cache 0 [ 122.101164][ T5838] [ 122.101173][ T5838] Dev 0: [ 122.101183][ T5838] buckets sectors fragmented [ 122.101195][ T5838] free 0 0 0 [ 122.101208][ T5838] sb 0 0 0 [ 122.101221][ T5838] journal 0 0 0 [ 122.101240][ T5838] btree 0 0 0 [ 122.101253][ T5838] user 0 0 0 [ 122.101265][ T5838] cached 0 0 0 [ 122.101278][ T5838] parity 0 0 0 [ 122.101291][ T5838] stripe 0 0 0 [ 122.101303][ T5838] need_gc_gens 0 0 0 [ 122.101316][ T5838] need_discard 0 0 0 [ 122.101328][ T5838] unstriped 0 0 0 [ 122.101341][ T5838] capacity 128 [ 122.101357][ T5838] [ 122.101367][ T5838] reserves: [ 122.101376][ T5838] stripe 60 [ 122.101387][ T5838] normal 58 [ 122.101398][ T5838] copygc 56 [ 122.101409][ T5838] btree 28 [ 122.101420][ T5838] btree_copygc 0 [ 122.101436][ T5838] reclaim 0 [ 122.101447][ T5838] interior_updates 0 [ 122.101457][ T5838] [ 122.101467][ T5838] open buckets 0 [ 122.101477][ T5838] buckets to invalidate 0 [ 122.101488][ T5838] [ 122.101497][ T5838] Copygc debug: [ 122.101507][ T5838] running: 1 [ 122.101517][ T5838] copygc_wait:0 [ 122.101543][ T5838] copygc_wait_at:0 [ 122.101558][ T5838] Currently waiting for:0 B [ 122.101569][ T5838] Currently waiting since:640 KiB [ 122.101580][ T5838] Currently calculated wait:0 B [ 122.101591][ T5838] [ 122.101600][ T5838] Journal debug: [ 122.101610][ T5838] flags: replay_done,running,may_skip_flush [ 122.101623][ T5838] dirty journal entries: 0/32768 [ 122.101634][ T5838] seq: 14 [ 122.101644][ T5838] seq_ondisk: 14 [ 122.101655][ T5838] last_seq: 15 [ 122.101666][ T5838] last_seq_ondisk: 14 [ 122.101677][ T5838] flushed_seq_ondisk: 14 [ 122.101687][ T5838] watermark: stripe [ 122.101698][ T5838] each entry reserved: 321 [ 122.101709][ T5838] nr flush writes: 1 [ 122.101720][ T5838] nr noflush writes: 0 [ 122.101731][ T5838] average write size: 1.27 KiB [ 122.101743][ T5838] free buf: 65536 [ 122.101754][ T5838] nr direct reclaim: 0 [ 122.101765][ T5838] nr background reclaim: 1 [ 122.101775][ T5838] reclaim kicked: 0 [ 122.101786][ T5838] reclaim runs in: 0 ms [ 122.101797][ T5838] blocked: 0 [ 122.101808][ T5838] current entry sectors: 256 [ 122.101819][ T5838] current entry error: (No error) [ 122.101831][ T5838] current entry: closed [ 122.101841][ T5838] unwritten entries: [ 122.101852][ T5838] last buf closed [ 122.101862][ T5838] space: [ 122.101871][ T5838] discarded 256:1536 [ 122.101883][ T5838] clean ondisk 256:1536 [ 122.101894][ T5838] clean 256:1536 [ 122.101905][ T5838] total 256:2048 [ 122.101916][ T5838] dev 0: [ 122.101925][ T5838] durability 1: [ 122.101936][ T5838] nr 8 [ 122.101947][ T5838] bucket size 256 [ 122.101957][ T5838] available 6:248 [ 122.101968][ T5838] discard_idx 0 [ 122.101979][ T5838] dirty_ondisk 0 (seq 14) [ 122.101991][ T5838] dirty_idx 0 (seq 14) [ 122.102002][ T5838] cur_idx 0 (seq 14) [ 122.102013][ T5838] replicas want 1 need 1 [ 286.571499][ T31] INFO: task syz-executor336:5838 blocked for more than 143 seconds. [ 286.580300][ T31] Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 [ 286.588074][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.597827][ T31] task:syz-executor336 state:D stack:19384 pid:5838 tgid:5838 ppid:5837 task_flags:0x400140 flags:0x00004006 [ 286.610248][ T31] Call Trace: [ 286.613574][ T31] [ 286.616539][ T31] __schedule+0x1b33/0x51f0 [ 286.621678][ T31] ? schedule+0x163/0x360 [ 286.626156][ T31] ? __pfx___schedule+0x10/0x10 [ 286.631581][ T31] ? kfree+0x198/0x430 [ 286.635727][ T31] ? schedule+0x90/0x360 [ 286.640616][ T31] ? schedule+0x90/0x360 [ 286.644925][ T31] schedule+0x163/0x360 [ 286.649142][ T31] ? __closure_sync+0x143/0x2a0 [ 286.654925][ T31] __closure_sync+0x1c0/0x2a0 [ 286.660038][ T31] ? __pfx___closure_sync+0x10/0x10 [ 286.665299][ T31] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 286.671643][ T31] bch2_btree_update_start+0x12bd/0x16c0 [ 286.677338][ T31] ? bch2_btree_split_leaf+0x12d/0x8a0 [ 286.683367][ T31] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 286.690191][ T31] ? kasan_save_track+0x51/0x80 [ 286.695175][ T31] ? kasan_save_track+0x3f/0x80 [ 286.700548][ T31] ? kasan_save_free_info+0x40/0x50 [ 286.705799][ T31] ? __kasan_slab_free+0x59/0x70 [ 286.711295][ T31] ? kfree+0x198/0x430 [ 286.715423][ T31] ? krealloc_noprof+0x1ad/0x300 [ 286.720882][ T31] ? __bch2_trans_commit+0x39a0/0x9da0 [ 286.726397][ T31] ? __pfx_closure_sync_fn+0x10/0x10 [ 286.732274][ T31] bch2_btree_split_leaf+0x12d/0x8a0 [ 286.737626][ T31] bch2_trans_commit_error+0x1b3/0x1480 [ 286.743714][ T31] ? __bch2_create+0xa79/0xf40 [ 286.748539][ T31] ? six_unlock_ip+0x2f8/0x440 [ 286.753707][ T31] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 286.760176][ T31] ? bch2_trans_verify_locks+0x33c/0x3c0 [ 286.765909][ T31] __bch2_trans_commit+0x8886/0x9da0 [ 286.771869][ T31] ? bch2_trans_iter_init_outlined+0x2d3/0x4b0 [ 286.778118][ T31] ? __bch2_create+0xa79/0xf40 [ 286.783433][ T31] ? __pfx___bch2_trans_commit+0x10/0x10 [ 286.789128][ T31] ? __pfx___bch2_bkey_get_val_typed+0x10/0x10 [ 286.795864][ T31] ? flush_warnings+0x3e2/0x470 [ 286.801525][ T31] ? bch2_subvolume_get+0x144/0x290 [ 286.806774][ T31] ? bch2_subvolume_get+0x15c/0x290 [ 286.812525][ T31] ? __bch2_create+0x793/0xf40 [ 286.817351][ T31] __bch2_create+0xa79/0xf40 [ 286.822642][ T31] ? __pfx___bch2_create+0x10/0x10 [ 286.827870][ T31] ? smk_access+0x4ab/0x4e0 [ 286.833003][ T31] ? smk_tskacc+0x300/0x370 [ 286.837575][ T31] ? smack_inode_permission+0x2dd/0x380 [ 286.844059][ T31] ? __pfx_smack_inode_permission+0x10/0x10 [ 286.850559][ T31] bch2_create+0xec/0x1c0 [ 286.855047][ T31] ? __pfx_bch2_create+0x10/0x10 [ 286.860801][ T31] ? bpf_lsm_inode_create+0x9/0x10 [ 286.865971][ T31] ? security_inode_create+0xbe/0x340 [ 286.872031][ T31] ? __pfx_bch2_create+0x10/0x10 [ 286.877292][ T31] path_openat+0x194b/0x35d0 [ 286.882876][ T31] ? __pfx_path_openat+0x10/0x10 [ 286.887900][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.894570][ T31] do_filp_open+0x284/0x4e0 [ 286.899141][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 286.904694][ T31] ? do_raw_spin_lock+0x151/0x370 [ 286.910613][ T31] do_sys_openat2+0x12b/0x1d0 [ 286.915360][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.921173][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 286.926948][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 286.932727][ T31] ? ptrace_notify+0x282/0x390 [ 286.937554][ T31] __x64_sys_openat+0x249/0x2a0 [ 286.942984][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 286.948446][ T31] do_syscall_64+0xf3/0x210 [ 286.953584][ T31] ? clear_bhb_loop+0x45/0xa0 [ 286.958353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.964797][ T31] RIP: 0033:0x7f091a492ad9 [ 286.969631][ T31] RSP: 002b:00007ffe19f4e818 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.978099][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f091a492ad9 [ 286.986783][ T31] RDX: 000000000000275a RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 286.995421][ T31] RBP: 00007f091a5155f0 R08: 000000000000f624 R09: 000055559006d4c0 [ 287.003824][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe19f4e840 [ 287.012382][ T31] R13: 00007ffe19f4ea68 R14: 431bde82d7b634db R15: 00007f091a4db03b [ 287.021354][ T31] [ 287.024557][ T31] [ 287.024557][ T31] Showing all locks held in the system: [ 287.032845][ T31] 1 lock held by khungtaskd/31: [ 287.037745][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 287.048615][ T31] 2 locks held by getty/5591: [ 287.053745][ T31] #0: ffff888035bb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.063988][ T31] #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 287.074550][ T31] 5 locks held by syz-executor336/5838: [ 287.080446][ T31] #0: ffff88807ed90420 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 287.090125][ T31] #1: ffff888072150148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: path_openat+0x8af/0x35d0 [ 287.101303][ T31] #2: ffff888072150530 (&inode->ei_update_lock){+.+.}-{4:4}, at: __bch2_create+0x359/0xf40 [ 287.111930][ T31] #3: ffff888073d84228 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7ed/0xd40 [ 287.122811][ T31] #4: ffff888073da6590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68a/0x16c0 [ 287.133811][ T31] 1 lock held by bch-copygc/loop/5848: [ 287.139884][ T31] [ 287.142263][ T31] ============================================= [ 287.142263][ T31] [ 287.151616][ T31] NMI backtrace for cpu 1 [ 287.151644][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 287.151670][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.151683][ T31] Call Trace: [ 287.151691][ T31] [ 287.151699][ T31] dump_stack_lvl+0x241/0x360 [ 287.151735][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.151763][ T31] ? __pfx__printk+0x10/0x10 [ 287.151802][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 287.151839][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.151865][ T31] ? _printk+0xd5/0x120 [ 287.151892][ T31] ? __wake_up_klogd+0xcc/0x110 [ 287.151926][ T31] ? __pfx__printk+0x10/0x10 [ 287.151957][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.151990][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 287.152023][ T31] watchdog+0x1058/0x10a0 [ 287.152051][ T31] ? watchdog+0x1ea/0x10a0 [ 287.152082][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.152107][ T31] kthread+0x7b7/0x940 [ 287.152132][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.152157][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152177][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152198][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152219][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152240][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.152269][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.152289][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152311][ T31] ret_from_fork+0x4b/0x80 [ 287.152329][ T31] ? __pfx_kthread+0x10/0x10 [ 287.152351][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.152398][ T31] [ 287.152406][ T31] Sending NMI from CPU 1 to CPUs 0: [ 287.314161][ C0] NMI backtrace for cpu 0 [ 287.314179][ C0] CPU: 0 UID: 0 PID: 5848 Comm: bch-copygc/loop Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 287.314200][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.314211][ C0] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 287.314232][ C0] Code: 89 f7 e8 6c 3d 82 00 48 c7 c3 58 3b 66 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d a9 e2 bc 11 <74> 10 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc e8 e2 1b 82 [ 287.314245][ C0] RSP: 0018:ffffc90004046ec0 EFLAGS: 00000286 [ 287.314261][ C0] RAX: 000000000002b79c RBX: ffff8880b8632b58 RCX: ffff88807aad1e00 [ 287.314274][ C0] RDX: dffffc0000000000 RSI: ffffffff8ca0e160 RDI: ffffffff8ca0e120 [ 287.314286][ C0] RBP: ffffffff816d9bc8 R08: ffffc90004047070 R09: 0000000000000000 [ 287.314298][ C0] R10: ffffc900040470d0 R11: fffff52000808e1c R12: ffffc90004047090 [ 287.314311][ C0] R13: dffffc0000000000 R14: ffffffff8e786c10 R15: dffffc0000000000 [ 287.314323][ C0] FS: 0000000000000000(0000) GS:ffff888124fcf000(0000) knlGS:0000000000000000 [ 287.314337][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.314348][ C0] CR2: 00007f274edb5580 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 287.314363][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.314373][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.314383][ C0] Call Trace: [ 287.314389][ C0] [ 287.314397][ C0] lock_release+0x4e/0x3e0 [ 287.314420][ C0] ? deref_stack_reg+0x17c/0x210 [ 287.314440][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 287.314457][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 287.314479][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 287.314497][ C0] ? __unwind_start+0xf8/0x740 [ 287.314517][ C0] __unwind_start+0x59a/0x740 [ 287.314537][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.314557][ C0] arch_stack_walk+0xe7/0x150 [ 287.314578][ C0] ? arch_stack_walk+0xe7/0x150 [ 287.314599][ C0] stack_trace_save+0x11a/0x1d0 [ 287.314617][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 287.314638][ C0] ? bch2_btree_path_verify_locks+0x85d/0xb40 [ 287.314664][ C0] kasan_save_track+0x3f/0x80 [ 287.314710][ C0] __kasan_kmalloc+0x9d/0xb0 [ 287.314729][ C0] __kvmalloc_node_noprof+0x329/0x5a0 [ 287.314751][ C0] ? __bch2_darray_resize_noprof+0xd2/0x290 [ 287.314779][ C0] __bch2_darray_resize_noprof+0xd2/0x290 [ 287.314802][ C0] ? bch2_copygc+0x457/0x4db0 [ 287.314829][ C0] bch2_copygc+0x23d2/0x4db0 [ 287.314857][ C0] ? bch2_copygc+0x457/0x4db0 [ 287.314922][ C0] ? __pfx_bch2_copygc+0x10/0x10 [ 287.314946][ C0] ? __lock_acquire+0xad5/0xd80 [ 287.314992][ C0] ? bch2_copygc_wait_amount+0x107/0xd00 [ 287.315021][ C0] ? bch2_copygc+0x457/0x4db0 [ 287.315045][ C0] ? bch2_copygc_wait_amount+0x107/0xd00 [ 287.315087][ C0] ? bch2_copygc+0x457/0x4db0 [ 287.315113][ C0] ? bch2_trans_srcu_unlock+0x459/0x5c0 [ 287.315150][ C0] bch2_copygc_thread+0x705/0xc00 [ 287.315183][ C0] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.315209][ C0] ? bch2_copygc_thread+0x1a3/0xc00 [ 287.315255][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 287.315280][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.315305][ C0] ? __kthread_parkme+0x1a8/0x200 [ 287.315338][ C0] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.315363][ C0] kthread+0x7b7/0x940 [ 287.315382][ C0] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 287.315408][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315423][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315440][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315456][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315472][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.315495][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.315510][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315528][ C0] ret_from_fork+0x4b/0x80 [ 287.315541][ C0] ? __pfx_kthread+0x10/0x10 [ 287.315558][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.315592][ C0] [ 287.315599][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.440 msecs [ 287.316170][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.719730][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full) [ 287.731537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.741713][ T31] Call Trace: [ 287.745008][ T31] [ 287.747948][ T31] dump_stack_lvl+0x241/0x360 [ 287.752667][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.757884][ T31] ? __pfx__printk+0x10/0x10 [ 287.762492][ T31] ? vscnprintf+0x5d/0x90 [ 287.766833][ T31] panic+0x349/0x880 [ 287.770745][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 287.776305][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.782474][ T31] ? __pfx_panic+0x10/0x10 [ 287.786921][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 287.792299][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.798464][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.804633][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.810800][ T31] watchdog+0x1097/0x10a0 [ 287.815143][ T31] ? watchdog+0x1ea/0x10a0 [ 287.819696][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.824383][ T31] kthread+0x7b7/0x940 [ 287.828478][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.833163][ T31] ? __pfx_kthread+0x10/0x10 [ 287.837763][ T31] ? __pfx_kthread+0x10/0x10 [ 287.842358][ T31] ? __pfx_kthread+0x10/0x10 [ 287.846954][ T31] ? __pfx_kthread+0x10/0x10 [ 287.851561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.856863][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.862083][ T31] ? __pfx_kthread+0x10/0x10 [ 287.867059][ T31] ret_from_fork+0x4b/0x80 [ 287.871512][ T31] ? __pfx_kthread+0x10/0x10 [ 287.876123][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.880930][ T31] [ 287.884266][ T31] Kernel Offset: disabled [ 287.888715][ T31] Rebooting in 86400 seconds..