./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor422433074 <...> Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. execve("./syz-executor422433074", ["./syz-executor422433074"], 0x7ffdfdd8b150 /* 10 vars */) = 0 brk(NULL) = 0x555566240000 brk(0x555566240d00) = 0x555566240d00 arch_prctl(ARCH_SET_FS, 0x555566240380) = 0 set_tid_address(0x555566240650) = 5851 set_robust_list(0x555566240660, 24) = 0 rseq(0x555566240ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor422433074", 4096) = 27 getrandom("\xa1\x67\xca\x0e\x33\xa0\x9d\x1f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555566240d00 brk(0x555566261d00) = 0x555566261d00 brk(0x555566262000) = 0x555566262000 mprotect(0x7fa20224b000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566240650) = 5852 ./strace-static-x86_64: Process 5852 attached [pid 5851] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC [pid 5852] set_robust_list(0x555566240660, 24) = 0 [pid 5851] <... openat resumed>) = 3 [pid 5851] write(3, "10000000000", 11) = 11 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "20", 2) = 2 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "100", 3) = 3 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "7 4 1 3", 7) = 7 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "0", 1) = 1 [pid 5851] close(3) = 0 [pid 5851] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "5852", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] kill(5852, SIGKILL) = 0 [pid 5852] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5852, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x555566240660, 24) = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5851] <... clone resumed>, child_tidptr=0x555566240650) = 5853 [pid 5853] <... prctl resumed>) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] write(1, "executing program\n", 18executing program ) = 18 [pid 5853] memfd_create("syzkaller", 0) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa1f9c00000 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5853] munmap(0x7fa1f9c00000, 138412032) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] close(3) = 0 [pid 5853] close(4) = 0 [pid 5853] mkdir("./file0", 0777) = 0 [ 278.497474][ T5853] loop0: detected capacity change from 0 to 32768 [ 278.584466][ T5853] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,nojournal_transaction_names,version_upgrade=none [ 278.584466][ T5853] allowing incompatible features above 0.0: (unknown version) [ 278.612016][ T5853] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 278.634618][ T5853] bcachefs (loop0): accounting_read... done [ 278.641513][ T5853] bcachefs (loop0): alloc_read... done [ 278.647297][ T5853] bcachefs (loop0): snapshots_read... done [ 278.656632][ T5853] bcachefs (loop0): going read-write [ 278.666240][ T5853] bcachefs (loop0): journal_replay... done [ 278.672123][ T5853] bcachefs (loop0): resume_logged_ops... done [ 278.678412][ T5853] bcachefs (loop0): delete_dead_inodes... done [pid 5853] mount("/dev/loop0", "./file0", "bcachefs", 0, "version_upgrade=none,background_compression=lz4,") = 0 [pid 5853] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5853] chdir("./file0") = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_CLR_FD) = 0 [pid 5853] close(4) = 0 [ 278.687370][ T5853] bcachefs (loop0): done starting filesystem [ 278.693745][ T5863] bcachefs (loop0): backpointer doesn't match extent it points to: [ 278.693771][ T5863] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 278.693791][ T5863] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 278.693810][ T5863] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [pid 5853] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_LARGEFILE|O_CLOEXEC|FASYNC, 010 [pid 5851] kill(-5853, SIGKILL) = 0 [pid 5851] kill(5853, SIGKILL) = 0 [pid 5851] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5851] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5851] getdents64(3, 0x5555662416f0 /* 2 entries */, 32768) = 48 [pid 5851] getdents64(3, 0x5555662416f0 /* 0 entries */, 32768) = 0 [pid 5851] close(3) = 0 [ 340.247087][ T5853] Allocator stuck? Waited for 30 seconds [ 340.247114][ T5853] Allocator debug: [ 340.247126][ T5853] capacity1536 [ 340.247137][ T5853] reserved 31232 [ 340.247148][ T5853] hidden 0 [ 340.247158][ T5853] btree 0 [ 340.247169][ T5853] data 0 [ 340.247179][ T5853] cached 0 [ 340.247190][ T5853] reserved 0 [ 340.247200][ T5853] online_reserved 768 [ 340.247211][ T5853] nr_inodes 0 [ 340.247221][ T5853] [ 340.247231][ T5853] freelist_wait waiting [ 340.247241][ T5853] open buckets allocated1 [ 340.247252][ T5853] open buckets total 1024 [ 340.247262][ T5853] open_buckets_wait empty [ 340.247273][ T5853] open_buckets_btree 0 [ 340.247283][ T5853] open_buckets_user 0 [ 340.247294][ T5853] btree reserve cache 0 [ 340.247304][ T5853] [ 340.247313][ T5853] Dev 0: [ 340.247323][ T5853] buckets sectors fragmented [ 340.247336][ T5853] free 0 0 0 [ 340.247348][ T5853] sb 0 0 0 [ 340.247361][ T5853] journal 0 0 0 [ 340.247373][ T5853] btree 0 0 0 [ 340.247386][ T5853] user 0 0 0 [ 340.247399][ T5853] cached 0 0 0 [ 340.247411][ T5853] parity 0 0 0 [ 340.247424][ T5853] stripe 0 0 0 [ 340.247442][ T5853] need_gc_gens 0 0 0 [ 340.247455][ T5853] need_discard 0 0 0 [ 340.247468][ T5853] unstriped 0 0 0 [ 340.247480][ T5853] capacity 128 [ 340.247491][ T5853] [ 340.247500][ T5853] reserves: [ 340.247510][ T5853] stripe 60 [ 340.247521][ T5853] normal 58 [ 340.247532][ T5853] copygc 56 [ 340.247542][ T5853] btree 28 [ 340.247553][ T5853] btree_copygc 0 [ 340.247564][ T5853] reclaim 0 [ 340.247575][ T5853] interior_updates 0 [ 340.247585][ T5853] [ 340.247595][ T5853] open buckets 0 [ 340.247605][ T5853] buckets to invalidate 0 [ 340.247616][ T5853] [ 340.247625][ T5853] Copygc debug: [ 340.247635][ T5853] running: 1 [ 340.247645][ T5853] copygc_wait:0 [ 340.247654][ T5853] copygc_wait_at:0 [ 340.247665][ T5853] Currently waiting for:0 B [ 340.247675][ T5853] Currently waiting since:640 KiB [ 340.247686][ T5853] Currently calculated wait:0 B [ 340.247697][ T5853] [ 340.247707][ T5853] Journal debug: [ 340.247717][ T5853] flags: replay_done,running,may_skip_flush [ 340.247729][ T5853] dirty journal entries: 0/32768 [ 340.247740][ T5853] seq: 15 [ 340.247751][ T5853] seq_ondisk: 15 [ 340.247762][ T5853] last_seq: 16 [ 340.247773][ T5853] last_seq_ondisk: 15 [ 340.247784][ T5853] flushed_seq_ondisk: 15 [ 340.247794][ T5853] watermark: stripe [ 340.247804][ T5853] each entry reserved: 321 [ 340.247814][ T5853] nr flush writes: 2 [ 340.247825][ T5853] nr noflush writes: 0 [ 340.247835][ T5853] average write size: 1.29 KiB [ 340.247846][ T5853] free buf: 65536 [ 340.247857][ T5853] nr direct reclaim: 0 [ 340.247867][ T5853] nr background reclaim: 3 [ 340.247878][ T5853] reclaim kicked: 0 [ 340.247889][ T5853] reclaim runs in: 0 ms [ 340.247900][ T5853] blocked: 0 [ 340.247910][ T5853] current entry sectors: 256 [ 340.247921][ T5853] current entry error: (No error) [ 340.247933][ T5853] current entry: closed [ 340.247944][ T5853] unwritten entries: [ 340.247954][ T5853] last buf closed [ 340.247964][ T5853] space: [ 340.247974][ T5853] discarded 256:1536 [ 340.247985][ T5853] clean ondisk 256:1536 [ 340.247996][ T5853] clean 256:1536 [ 340.248007][ T5853] total 256:2048 [ 340.248018][ T5853] dev 0: [ 340.248028][ T5853] durability 1: [ 340.248038][ T5853] nr 8 [ 340.248048][ T5853] bucket size 256 [ 340.248059][ T5853] available 6:240 [ 340.248070][ T5853] discard_idx 0 [ 340.248081][ T5853] dirty_ondisk 0 (seq 15) [ 340.248092][ T5853] dirty_idx 0 (seq 15) [ 340.248103][ T5853] cur_idx 0 (seq 15) [ 340.248114][ T5853] replicas want 1 need 1 [ 502.795896][ T31] INFO: task syz-executor422:5853 blocked for more than 143 seconds. [ 502.804067][ T31] Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 [ 502.812764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.821896][ T31] task:syz-executor422 state:D stack:18288 pid:5853 tgid:5853 ppid:5851 task_flags:0x400140 flags:0x00004006 [ 502.834805][ T31] Call Trace: [ 502.838518][ T31] [ 502.841519][ T31] __schedule+0x1b33/0x51f0 [ 502.846596][ T31] ? schedule+0x163/0x360 [ 502.850991][ T31] ? __pfx___schedule+0x10/0x10 [ 502.856241][ T31] ? kfree+0x198/0x430 [ 502.860469][ T31] ? schedule+0x90/0x360 [ 502.864847][ T31] ? schedule+0x90/0x360 [ 502.869931][ T31] schedule+0x163/0x360 [ 502.874154][ T31] ? __closure_sync+0x143/0x2a0 [ 502.879678][ T31] __closure_sync+0x1c0/0x2a0 [ 502.884440][ T31] ? __pfx___closure_sync+0x10/0x10 [ 502.890267][ T31] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 502.896448][ T31] bch2_btree_update_start+0x12bd/0x16c0 [ 502.902156][ T31] ? bch2_btree_split_leaf+0x12d/0x8a0 [ 502.908225][ T31] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 502.914359][ T31] ? bch2_logged_op_start+0x1e6/0x3f0 [ 502.920398][ T31] ? bch2_btree_path_peek_slot+0x3f8/0xff0 [ 502.926675][ T31] ? __pfx_closure_sync_fn+0x10/0x10 [ 502.932027][ T31] ? __pfx_bch2_btree_path_peek_slot+0x10/0x10 [ 502.939229][ T31] ? bch2_trans_update_by_path+0xffe/0x2150 [ 502.945183][ T31] bch2_btree_split_leaf+0x12d/0x8a0 [ 502.951051][ T31] bch2_trans_commit_error+0x1b3/0x1480 [ 502.957169][ T31] ? bch2_logged_op_start+0x22d/0x3f0 [ 502.962597][ T31] ? six_unlock_ip+0x2f8/0x440 [ 502.967956][ T31] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 502.974025][ T31] ? bch2_trans_verify_locks+0x33c/0x3c0 [ 502.980277][ T31] __bch2_trans_commit+0x8886/0x9da0 [ 502.986024][ T31] ? bch2_logged_op_start+0x22d/0x3f0 [ 502.991459][ T31] ? __pfx___bch2_trans_commit+0x10/0x10 [ 502.997770][ T31] ? bch2_trans_begin+0x1795/0x1d30 [ 503.003059][ T31] ? bch2_path_put+0x1de/0x2330 [ 503.008491][ T31] ? __pfx_bch2_bkey_get_empty_slot+0x10/0x10 [ 503.014628][ T31] ? bch2_trans_iter_exit+0x18a/0x300 [ 503.020598][ T31] bch2_logged_op_start+0x22d/0x3f0 [ 503.026218][ T31] ? __pfx_bch2_logged_op_start+0x10/0x10 [ 503.032012][ T31] ? bch2_bkey_get_empty_slot+0x111/0x5b0 [ 503.038223][ T31] bch2_truncate+0x1eb/0x340 [ 503.042874][ T31] ? __pfx_bch2_truncate+0x10/0x10 [ 503.049034][ T31] ? unmap_mapping_range+0xfa/0x2a0 [ 503.054309][ T31] ? truncate_setsize+0xcf/0xf0 [ 503.059694][ T31] bchfs_truncate+0x97b/0xc60 [ 503.064512][ T31] ? bch2_trans_put+0xa59/0x1030 [ 503.070090][ T31] ? __pfx_bchfs_truncate+0x10/0x10 [ 503.075550][ T31] ? setattr_prepare+0x1f5/0xb20 [ 503.081060][ T31] ? bch2_setattr+0x1a4/0x220 [ 503.086361][ T31] ? __pfx_bch2_setattr+0x10/0x10 [ 503.091452][ T31] notify_change+0xbca/0xe90 [ 503.096641][ T31] do_truncate+0x222/0x310 [ 503.101112][ T31] ? __pfx_do_truncate+0x10/0x10 [ 503.106680][ T31] path_openat+0x2e4f/0x35d0 [ 503.111379][ T31] ? __pfx_path_openat+0x10/0x10 [ 503.116957][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.123152][ T31] do_filp_open+0x284/0x4e0 [ 503.128356][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 503.133457][ T31] ? do_raw_spin_lock+0x151/0x370 [ 503.139121][ T31] do_sys_openat2+0x12b/0x1d0 [ 503.145100][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.150994][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 503.157291][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 503.162569][ T31] ? ptrace_notify+0x282/0x390 [ 503.168002][ T31] __x64_sys_openat+0x249/0x2a0 [ 503.173105][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 503.179100][ T31] do_syscall_64+0xf3/0x210 [ 503.183661][ T31] ? clear_bhb_loop+0x45/0xa0 [ 503.189377][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.195343][ T31] RIP: 0033:0x7fa2021c7e09 [ 503.200943][ T31] RSP: 002b:00007fffa65e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.210120][ T31] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fa2021c7e09 [ 503.218514][ T31] RDX: 000000000008aa42 RSI: 0000200000000040 RDI: 00000000ffffff9c [ 503.227323][ T31] RBP: 00000000000016dc R08: 000000000000f624 R09: 0000000000000000 [ 503.235350][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fffa65e8cc0 [ 503.243898][ T31] R13: 00007fffa65e8da0 R14: 431bde82d7b634db R15: 00007fa20221101d [ 503.252364][ T31] [ 503.255544][ T31] [ 503.255544][ T31] Showing all locks held in the system: [ 503.263850][ T31] 1 lock held by khungtaskd/31: [ 503.269725][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 503.280113][ T31] 2 locks held by getty/5587: [ 503.284932][ T31] #0: ffff8880316ef0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 503.295322][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 503.305959][ T31] 5 locks held by syz-executor422/5853: [ 503.311587][ T31] #0: ffff888035ae2420 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 503.321542][ T31] #1: ffff8880689b88e0 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x20e/0x310 [ 503.332326][ T31] #2: ffff88806a700a70 (&c->snapshot_create_lock){.+.+}-{4:4}, at: bch2_truncate+0x1ae/0x340 [ 503.343587][ T31] #3: ffff88806a704228 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7ed/0xd40 [ 503.354796][ T31] #4: ffff88806a726590 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x68a/0x16c0 [ 503.365528][ T31] 3 locks held by bch-copygc/loop/5863: [ 503.371507][ T31] [ 503.373882][ T31] ============================================= [ 503.373882][ T31] [ 503.383470][ T31] NMI backtrace for cpu 0 [ 503.383499][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 503.383538][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.383556][ T31] Call Trace: [ 503.383569][ T31] [ 503.383582][ T31] dump_stack_lvl+0x241/0x360 [ 503.383635][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.383679][ T31] ? __pfx__printk+0x10/0x10 [ 503.383744][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 503.383783][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 503.383810][ T31] ? _printk+0xd5/0x120 [ 503.383837][ T31] ? __wake_up_klogd+0xcc/0x110 [ 503.383862][ T31] ? __pfx__printk+0x10/0x10 [ 503.383893][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.383925][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 503.383959][ T31] watchdog+0x1058/0x10a0 [ 503.383988][ T31] ? watchdog+0x1ea/0x10a0 [ 503.384019][ T31] ? __pfx_watchdog+0x10/0x10 [ 503.384044][ T31] kthread+0x7b7/0x940 [ 503.384069][ T31] ? __pfx_watchdog+0x10/0x10 [ 503.384094][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384114][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384135][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384156][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384177][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.384205][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 503.384225][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384248][ T31] ret_from_fork+0x4b/0x80 [ 503.384266][ T31] ? __pfx_kthread+0x10/0x10 [ 503.384287][ T31] ret_from_fork_asm+0x1a/0x30 [ 503.384334][ T31] [ 503.384343][ T31] Sending NMI from CPU 0 to CPUs 1: [ 503.546376][ C1] NMI backtrace for cpu 1 [ 503.546393][ C1] CPU: 1 UID: 0 PID: 5863 Comm: bch-copygc/loop Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 503.546414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.546425][ C1] RIP: 0010:__asan_memset+0x31/0x50 [ 503.546457][ C1] Code: 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 5d e6 ff ff 84 c0 74 12 48 89 ef 44 89 f6 48 89 da 5b <41> 5e 5d e9 67 81 fd 09 31 c0 5b 41 5e 5d c3 cc cc cc cc 66 66 66 [ 503.546471][ C1] RSP: 0018:ffffc900041a6268 EFLAGS: 00000202 [ 503.546486][ C1] RAX: 1ffff92000834c01 RBX: 0000000000000003 RCX: ffffffff844c240b [ 503.546498][ C1] RDX: 000000000000000c RSI: 0000000000000000 RDI: ffffc900041a6380 [ 503.546508][ C1] RBP: ffffc900041a6380 R08: ffffc900041a638b R09: 1ffff92000834c71 [ 503.546521][ C1] R10: dffffc0000000000 R11: fffff52000834c72 R12: ffffc900041a6380 [ 503.546533][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900041a6560 [ 503.546545][ C1] FS: 0000000000000000(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000 [ 503.546558][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.546569][ C1] CR2: 000056410e023ae8 CR3: 0000000033246000 CR4: 00000000003526f0 [ 503.546583][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.546593][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.546603][ C1] Call Trace: [ 503.546609][ C1] [ 503.546617][ C1] __bkey_unpack_pos+0x7b/0x790 [ 503.546646][ C1] __bch2_bkey_cmp_packed_format_checked+0x336/0x800 [ 503.546677][ C1] ? __pfx___bch2_bkey_cmp_packed_format_checked+0x10/0x10 [ 503.546706][ C1] ? __asan_memset+0x23/0x50 [ 503.546732][ C1] ? bch2_btree_path_verify_level+0x37f/0x1920 [ 503.546753][ C1] ? bch2_data_update_init+0x5ef6/0x7950 [ 503.546778][ C1] ? bch2_btree_node_iter_init+0x84f/0x42e0 [ 503.546800][ C1] bch2_btree_node_iter_init+0x23a1/0x42e0 [ 503.546833][ C1] ? __asan_memset+0x23/0x50 [ 503.546857][ C1] ? bch2_btree_path_verify_level+0x37f/0x1920 [ 503.546878][ C1] ? __pfx_bch2_btree_node_iter_init+0x10/0x10 [ 503.546913][ C1] bch2_btree_path_level_init+0x4e4/0xa00 [ 503.546934][ C1] ? bch2_btree_path_traverse_one+0xab7/0x2970 [ 503.546958][ C1] bch2_btree_path_traverse_one+0x10af/0x2970 [ 503.546993][ C1] ? bch2_btree_path_traverse_one+0xab7/0x2970 [ 503.547020][ C1] ? __bch2_move_data_phys+0xcbf/0x2830 [ 503.547046][ C1] ? __pfx_bch2_btree_path_traverse_one+0x10/0x10 [ 503.547067][ C1] ? do_raw_spin_lock+0x151/0x370 [ 503.547088][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.547107][ C1] ? __pfx_wb_sort+0x10/0x10 [ 503.547136][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 503.547154][ C1] ? bch2_btree_path_verify_locks+0x271/0xb40 [ 503.547177][ C1] ? bch2_btree_path_verify+0x1ff/0x300 [ 503.547199][ C1] bch2_btree_iter_peek_max+0xb9b/0x61a0 [ 503.547225][ C1] ? run_store+0x1c1/0xc40 [ 503.547258][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.547286][ C1] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 503.547311][ C1] ? __bch2_time_stats_update+0x2e6/0x390 [ 503.547334][ C1] ? bch2_trans_begin+0x1795/0x1d30 [ 503.547365][ C1] ? __bch2_move_data_phys+0xc61/0x2830 [ 503.547397][ C1] ? bch2_write_ref_put+0x5b/0x670 [ 503.547423][ C1] __bch2_move_data_phys+0xcbf/0x2830 [ 503.547454][ C1] ? __bch2_move_data_phys+0x26d/0x2830 [ 503.547484][ C1] ? __pfx___bch2_move_data_phys+0x10/0x10 [ 503.547511][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 503.547530][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 503.547557][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 503.547579][ C1] ? __bch2_move_data_phys+0x26d/0x2830 [ 503.547602][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 503.547634][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 503.547660][ C1] ? kasan_save_track+0x51/0x80 [ 503.547675][ C1] ? kasan_save_track+0x3f/0x80 [ 503.547690][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 503.547706][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 503.547729][ C1] ? bch2_copygc+0x2fd9/0x4db0 [ 503.547752][ C1] ? bch2_copygc_thread+0x705/0xc00 [ 503.547776][ C1] ? kthread+0x7b7/0x940 [ 503.547793][ C1] ? ret_from_fork+0x4b/0x80 [ 503.547806][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 503.547835][ C1] ? bch2_evacuate_bucket+0x14c/0x2e0 [ 503.547860][ C1] bch2_evacuate_bucket+0x1d9/0x2e0 [ 503.547883][ C1] ? __pfx_evacuate_bucket_pred+0x10/0x10 [ 503.547908][ C1] ? __pfx_bch2_evacuate_bucket+0x10/0x10 [ 503.547941][ C1] ? rht_lock+0x147/0x270 [ 503.547984][ C1] bch2_copygc+0x4058/0x4db0 [ 503.548015][ C1] ? bch2_copygc+0x457/0x4db0 [ 503.548061][ C1] ? __pfx_bch2_copygc+0x10/0x10 [ 503.548084][ C1] ? __lock_acquire+0xad5/0xd80 [ 503.548115][ C1] ? bch2_copygc_wait_amount+0x107/0xd00 [ 503.548144][ C1] ? bch2_copygc+0x457/0x4db0 [ 503.548168][ C1] ? bch2_copygc_wait_amount+0x107/0xd00 [ 503.548209][ C1] ? bch2_copygc+0x457/0x4db0 [ 503.548235][ C1] ? bch2_trans_srcu_unlock+0x459/0x5c0 [ 503.548265][ C1] bch2_copygc_thread+0x705/0xc00 [ 503.548296][ C1] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 503.548322][ C1] ? bch2_copygc_thread+0x1a3/0xc00 [ 503.548367][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 503.548391][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 503.548416][ C1] ? __kthread_parkme+0x1a8/0x200 [ 503.548442][ C1] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 503.548468][ C1] kthread+0x7b7/0x940 [ 503.548485][ C1] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 503.548511][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548526][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548542][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548558][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548574][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.548597][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 503.548612][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548629][ C1] ret_from_fork+0x4b/0x80 [ 503.548642][ C1] ? __pfx_kthread+0x10/0x10 [ 503.548659][ C1] ret_from_fork_asm+0x1a/0x30 [ 503.548691][ C1] [ 503.549814][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 504.138348][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 504.150189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.160373][ T31] Call Trace: [ 504.163681][ T31] [ 504.166641][ T31] dump_stack_lvl+0x241/0x360 [ 504.171369][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.176608][ T31] ? __pfx__printk+0x10/0x10 [ 504.181270][ T31] ? vscnprintf+0x5d/0x90 [ 504.185662][ T31] panic+0x349/0x880 [ 504.189588][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 504.195023][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 504.201224][ T31] ? __pfx_panic+0x10/0x10 [ 504.205689][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 504.211101][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 504.217305][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 504.223501][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 504.229704][ T31] watchdog+0x1097/0x10a0 [ 504.234076][ T31] ? watchdog+0x1ea/0x10a0 [ 504.238552][ T31] ? __pfx_watchdog+0x10/0x10 [ 504.243281][ T31] kthread+0x7b7/0x940 [ 504.247386][ T31] ? __pfx_watchdog+0x10/0x10 [ 504.252100][ T31] ? __pfx_kthread+0x10/0x10 [ 504.256743][ T31] ? __pfx_kthread+0x10/0x10 [ 504.261366][ T31] ? __pfx_kthread+0x10/0x10 [ 504.265999][ T31] ? __pfx_kthread+0x10/0x10 [ 504.270620][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.275857][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 504.281094][ T31] ? __pfx_kthread+0x10/0x10 [ 504.285722][ T31] ret_from_fork+0x4b/0x80 [ 504.290167][ T31] ? __pfx_kthread+0x10/0x10 [ 504.294796][ T31] ret_from_fork_asm+0x1a/0x30 [ 504.299627][ T31] [ 504.302969][ T31] Kernel Offset: disabled [ 504.307434][ T31] Rebooting in 86400 seconds..