./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3932390210 <...> Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. execve("./syz-executor3932390210", ["./syz-executor3932390210"], 0x7ffc2070ae20 /* 10 vars */) = 0 brk(NULL) = 0x55558cc8c000 brk(0x55558cc8cd00) = 0x55558cc8cd00 arch_prctl(ARCH_SET_FS, 0x55558cc8c380) = 0 set_tid_address(0x55558cc8c650) = 5853 set_robust_list(0x55558cc8c660, 24) = 0 rseq(0x55558cc8cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3932390210", 4096) = 28 getrandom("\x25\x2b\xe7\x8f\xff\x0e\x70\x03", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558cc8cd00 brk(0x55558ccadd00) = 0x55558ccadd00 brk(0x55558ccae000) = 0x55558ccae000 mprotect(0x7feb95091000, 16384, PROT_READ) = 0 mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000 mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000 mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000 mkdir("./syzkaller.2WMbj0", 0700) = 0 chmod("./syzkaller.2WMbj0", 0777) = 0 chdir("./syzkaller.2WMbj0") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached , child_tidptr=0x55558cc8c650) = 5855 [pid 5855] set_robust_list(0x55558cc8c660, 24) = 0 [pid 5855] chdir("./0") = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5855] write(1, "executing program\n", 18) = 18 [pid 5855] memfd_create("syzkaller", 0) = 3 [pid 5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb8ca00000 [pid 5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5855] munmap(0x7feb8ca00000, 138412032) = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5855] close(3) = 0 [pid 5855] close(4) = 0 [pid 5855] mkdir("./file0", 0777) = 0 [ 383.526401][ T5855] loop0: detected capacity change from 0 to 32768 [ 383.605907][ T5855] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,nojournal_transaction_names,version_upgrade=none [ 383.625802][ T5855] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 383.647741][ T5855] bcachefs (loop0): accounting_read... done [ 383.654829][ T5855] bcachefs (loop0): alloc_read... done [ 383.660483][ T5855] bcachefs (loop0): stripes_read... done [ 383.666274][ T5855] bcachefs (loop0): snapshots_read... done [ 383.674174][ T5855] bcachefs (loop0): going read-write [ 383.681491][ T5855] bcachefs (loop0): journal_replay... done [ 383.687463][ T5855] bcachefs (loop0): resume_logged_ops... done [ 383.693666][ T5855] bcachefs (loop0): delete_dead_inodes... done [pid 5855] mount("/dev/loop0", "./file0", "bcachefs", 0, "version_upgrade=none,background_compression=zstd,") = 0 [pid 5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5855] chdir("./file0") = 0 [pid 5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5855] ioctl(4, LOOP_CLR_FD) = 0 [ 383.703293][ T5855] bcachefs (loop0): done starting filesystem [ 383.709577][ T5864] backpointer doesn't match extent it points to: [ 383.709607][ T5864] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 383.709625][ T5864] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [pid 5855] close(4) = 0 [pid 5855] exit_group(0) = ? [pid 5855] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 383.709644][ T5864] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 383.766165][ T5855] syz-executor393 (5855) used greatest stack depth: 19024 bytes left getdents64(3, 0x55558cc8d6f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 383.888633][ T5853] bcachefs (loop0): shutting down [ 383.894225][ T5853] bcachefs (loop0): going read-only [ 383.899566][ T5853] bcachefs (loop0): finished waiting for writes to stop [ 415.722422][ T5864] Allocator stuck? Waited for 30 seconds [ 415.722438][ T5864] Allocator debug: [ 415.722444][ T5864] capacity1536 [ 415.722450][ T5864] reserved 31232 [ 415.722456][ T5864] hidden 0 [ 415.722462][ T5864] btree 0 [ 415.722468][ T5864] data 0 [ 415.722474][ T5864] cached 0 [ 415.722480][ T5864] reserved 0 [ 415.722486][ T5864] online_reserved 0 [ 415.722491][ T5864] nr_inodes 0 [ 415.722497][ T5864] [ 415.722503][ T5864] freelist_wait waiting [ 415.722509][ T5864] open buckets allocated1 [ 415.722515][ T5864] open buckets total 1024 [ 415.722521][ T5864] open_buckets_wait empty [ 415.722527][ T5864] open_buckets_btree 0 [ 415.722533][ T5864] open_buckets_user 0 [ 415.722539][ T5864] btree reserve cache 0 [ 415.722544][ T5864] [ 415.722550][ T5864] Dev 0: [ 415.722555][ T5864] buckets sectors fragmented [ 415.722562][ T5864] free 0 0 0 [ 415.722569][ T5864] sb 0 0 0 [ 415.722576][ T5864] journal 0 0 0 [ 415.722583][ T5864] btree 0 0 0 [ 415.722591][ T5864] user 0 0 0 [ 415.722598][ T5864] cached 0 0 0 [ 415.722605][ T5864] parity 0 0 0 [ 415.722612][ T5864] stripe 0 0 0 [ 415.722619][ T5864] need_gc_gens 0 0 0 [ 415.722626][ T5864] need_discard 0 0 0 [ 415.722633][ T5864] unstriped 0 0 0 [ 415.722640][ T5864] capacity 128 [ 415.722646][ T5864] [ 415.722651][ T5864] reserves: [ 415.722657][ T5864] stripe 60 [ 415.722663][ T5864] normal 58 [ 415.722669][ T5864] copygc 56 [ 415.722675][ T5864] btree 28 [ 415.722681][ T5864] btree_copygc 0 [ 415.722687][ T5864] reclaim 0 [ 415.722693][ T5864] interior_updates 0 [ 415.722699][ T5864] [ 415.722704][ T5864] open buckets 0 [ 415.722710][ T5864] buckets to invalidate 0 [ 415.722716][ T5864] [ 415.722721][ T5864] Copygc debug: [ 415.722727][ T5864] running: 1 [ 415.722732][ T5864] copygc_wait:0 [ 415.722738][ T5864] copygc_wait_at:0 [ 415.722743][ T5864] Currently waiting for:0 B [ 415.722749][ T5864] Currently waiting since:640 KiB [ 415.722756][ T5864] Currently calculated wait:0 B [ 415.722762][ T5864] [ 415.722767][ T5864] Journal debug: [ 415.722772][ T5864] flags: replay_done,running,may_skip_flush [ 415.722786][ T5864] dirty journal entries: 0/32768 [ 415.722792][ T5864] seq: 15 [ 415.722798][ T5864] seq_ondisk: 15 [ 415.722805][ T5864] last_seq: 16 [ 415.722811][ T5864] last_seq_ondisk: 15 [ 415.722817][ T5864] flushed_seq_ondisk: 15 [ 415.722823][ T5864] watermark: stripe [ 415.722829][ T5864] each entry reserved: 321 [ 415.722835][ T5864] nr flush writes: 2 [ 415.722841][ T5864] nr noflush writes: 0 [ 415.722847][ T5864] average write size: 1.21 KiB [ 415.722853][ T5864] nr direct reclaim: 0 [ 415.722859][ T5864] nr background reclaim: 2 [ 415.722865][ T5864] reclaim kicked: 0 [ 415.722871][ T5864] reclaim runs in: 0 ms [ 415.722877][ T5864] blocked: 0 [ 415.722883][ T5864] current entry sectors: 256 [ 415.722889][ T5864] current entry error: ok [ 415.722896][ T5864] current entry: closed [ 415.722902][ T5864] unwritten entries: [ 415.722907][ T5864] last buf closed [ 415.722913][ T5864] space: [ 415.722918][ T5864] discarded 256:1536 [ 415.722925][ T5864] clean ondisk 256:1536 [ 415.722931][ T5864] clean 256:1536 [ 415.722937][ T5864] total 256:2048 [ 415.722943][ T5864] dev 0: [ 415.722949][ T5864] durability 1: [ 415.722954][ T5864] nr 8 [ 415.722960][ T5864] bucket size 256 [ 415.722966][ T5864] available 6:240 [ 415.722973][ T5864] discard_idx 0 [ 415.722979][ T5864] dirty_ondisk 0 (seq 15) [ 415.722985][ T5864] dirty_idx 0 (seq 15) [ 415.722991][ T5864] cur_idx 0 (seq 15) [ 415.722998][ T5864] replicas want 1 need 1 [ 415.723003][ T5864] [ 573.151861][ T31] INFO: task syz-executor393:5853 blocked for more than 143 seconds. [ 573.160323][ T31] Not tainted 6.14.0-rc7-syzkaller #0 [ 573.166331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.175075][ T31] task:syz-executor393 state:D stack:23840 pid:5853 tgid:5853 ppid:5850 task_flags:0x400100 flags:0x00004002 [ 573.187271][ T31] Call Trace: [ 573.190579][ T31] [ 573.193751][ T31] __schedule+0x18bc/0x4c40 [ 573.198328][ T31] ? __pfx___schedule+0x10/0x10 [ 573.203506][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.208616][ T31] ? schedule+0x90/0x320 [ 573.213178][ T31] schedule+0x14b/0x320 [ 573.217381][ T31] schedule_timeout+0xb0/0x290 [ 573.222495][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 573.227906][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.234137][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.239457][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.244997][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.250226][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.255666][ T31] ? wait_for_completion+0x2fe/0x620 [ 573.260991][ T31] wait_for_completion+0x355/0x620 [ 573.266442][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 573.272324][ T31] ? synchronize_rcu+0x11b/0x360 [ 573.277308][ T31] ? kthread_unpark+0xd0/0x290 [ 573.282483][ T31] kthread_stop+0x1a1/0x640 [ 573.287054][ T31] bch2_copygc_stop+0x4f/0x150 [ 573.292091][ T31] __bch2_fs_read_only+0x47/0x450 [ 573.297182][ T31] bch2_fs_read_only+0xbff/0x12a0 [ 573.302474][ T31] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 573.307994][ T31] ? __bch2_print+0x17a/0x220 [ 573.312935][ T31] ? down_write+0x18c/0x220 [ 573.317484][ T31] ? __pfx_down_write+0x10/0x10 [ 573.322638][ T31] ? hook_sb_delete+0xaa0/0xbd0 [ 573.327529][ T31] __bch2_fs_stop+0x105/0x5c0 [ 573.332449][ T31] ? __pfx___bch2_fs_stop+0x10/0x10 [ 573.337723][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 573.343077][ T31] ? bch2_sync_fs+0x155/0x300 [ 573.347814][ T31] ? __pfx_bch2_put_super+0x10/0x10 [ 573.353288][ T31] generic_shutdown_super+0x139/0x2d0 [ 573.358699][ T31] bch2_kill_sb+0x41/0x50 [ 573.363317][ T31] deactivate_locked_super+0xc4/0x130 [ 573.368724][ T31] cleanup_mnt+0x41f/0x4b0 [ 573.373375][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.378635][ T31] task_work_run+0x24f/0x310 [ 573.383531][ T31] ? __pfx_task_work_run+0x10/0x10 [ 573.388683][ T31] ? path_umount+0x211/0xf80 [ 573.393517][ T31] ptrace_notify+0x2d9/0x380 [ 573.398140][ T31] ? __x64_sys_umount+0x123/0x170 [ 573.403538][ T31] ? user_path_at+0x44/0x60 [ 573.408087][ T31] ? __pfx_ptrace_notify+0x10/0x10 [ 573.413451][ T31] ? kmem_cache_free+0x195/0x410 [ 573.418430][ T31] ? __x64_sys_umount+0x123/0x170 [ 573.423758][ T31] syscall_exit_work+0xc7/0x1d0 [ 573.428677][ T31] syscall_exit_to_user_mode+0x24a/0x340 [ 573.434533][ T31] do_syscall_64+0x100/0x230 [ 573.439153][ T31] ? clear_bhb_loop+0x35/0x90 [ 573.444087][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.450024][ T31] RIP: 0033:0x7feb9500f3c7 [ 573.454655][ T31] RSP: 002b:00007ffcc8d703b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 573.463283][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb9500f3c7 [ 573.471281][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc8d70470 [ 573.479512][ T31] RBP: 00007ffcc8d70470 R08: 0000000000000000 R09: 0000000000000000 [ 573.487755][ T31] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffcc8d714e0 [ 573.495974][ T31] R13: 000055558cc8d6c0 R14: 0000000000000001 R15: 431bde82d7b634db [ 573.504195][ T31] [ 573.507294][ T31] INFO: task bch-copygc/loop:5864 blocked for more than 143 seconds. [ 573.515638][ T31] Not tainted 6.14.0-rc7-syzkaller #0 [ 573.521718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.530402][ T31] task:bch-copygc/loop state:D stack:19352 pid:5864 tgid:5864 ppid:2 task_flags:0x240040 flags:0x00024000 [ 573.542579][ T31] Call Trace: [ 573.545905][ T31] [ 573.548858][ T31] __schedule+0x18bc/0x4c40 [ 573.553610][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.559634][ T31] ? __pfx___schedule+0x10/0x10 [ 573.564728][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.569785][ T31] ? bch2_print_allocator_stuck+0x165/0xcb0 [ 573.575905][ T31] ? bch2_print_allocator_stuck+0xc24/0xcb0 [ 573.581990][ T31] ? schedule+0x90/0x320 [ 573.586256][ T31] schedule+0x14b/0x320 [ 573.590436][ T31] __closure_sync+0x259/0x2f0 [ 573.595351][ T31] ? __closure_sync+0x149/0x2f0 [ 573.600228][ T31] ? __pfx___closure_sync+0x10/0x10 [ 573.605685][ T31] ? __bch2_wait_on_allocator+0x1d6/0x250 [ 573.611434][ T31] __bch2_write+0x5376/0x5a80 [ 573.616394][ T31] ? mark_lock+0x9a/0x360 [ 573.620920][ T31] ? __pfx___bch2_write+0x10/0x10 [ 573.626218][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.632394][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.638754][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 573.644858][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.650084][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 573.656039][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 573.662449][ T31] ? stack_depot_save_flags+0x7b4/0x940 [ 573.668023][ T31] ? kasan_save_track+0x51/0x80 [ 573.672914][ T31] ? kasan_save_track+0x3f/0x80 [ 573.677795][ T31] ? kasan_save_free_info+0x40/0x50 [ 573.683059][ T31] ? __kasan_slab_free+0x59/0x70 [ 573.688023][ T31] ? kfree+0x196/0x430 [ 573.692146][ T31] ? bch2_printbuf_exit+0x6d/0xa0 [ 573.697253][ T31] ? backpointer_target_not_found+0xdfa/0x1170 [ 573.703490][ T31] ? bch2_backpointer_get_key+0x379/0x570 [ 573.709228][ T31] ? bch2_evacuate_bucket+0x102c/0x3280 [ 573.714841][ T31] ? bch2_copygc+0x415d/0x4fa0 [ 573.719648][ T31] ? bch2_copygc_thread+0x6ef/0xba0 [ 573.724917][ T31] ? ret_from_fork+0x4b/0x80 [ 573.729529][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 573.734543][ T31] bch2_write+0x865/0x1660 [ 573.738994][ T31] ? __pfx_bch2_write+0x10/0x10 [ 573.743921][ T31] ? bch2_trans_srcu_unlock+0x441/0x5c0 [ 573.749502][ T31] ? bch2_data_update_read_done+0xfd/0x330 [ 573.755356][ T31] bch2_data_update_read_done+0x22e/0x330 [ 573.761095][ T31] ? __pfx_bch2_data_update_read_done+0x10/0x10 [ 573.767433][ T31] ? bch2_trans_srcu_unlock+0x450/0x5c0 [ 573.773062][ T31] bch2_moving_ctxt_do_pending_writes+0x44c/0x8d0 [ 573.779484][ T31] ? __pfx_bch2_moving_ctxt_do_pending_writes+0x10/0x10 [ 573.786559][ T31] bch2_move_ratelimit+0x76c/0xeb0 [ 573.791845][ T31] ? __pfx_bch2_move_ratelimit+0x10/0x10 [ 573.797508][ T31] ? bch2_backpointer_get_key+0x397/0x570 [ 573.803315][ T31] ? __pfx_bch2_backpointer_get_key+0x10/0x10 [ 573.809407][ T31] ? bch2_btree_iter_advance+0x372/0x870 [ 573.815129][ T31] bch2_evacuate_bucket+0xfe9/0x3280 [ 573.820446][ T31] ? bch2_evacuate_bucket+0x2f6/0x3280 [ 573.826021][ T31] ? __pfx_bch2_evacuate_bucket+0x10/0x10 [ 573.831794][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.837791][ T31] ? register_lock_class+0x102/0x980 [ 573.843176][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 573.849089][ T31] ? stack_trace_save+0x118/0x1d0 [ 573.854161][ T31] ? bch2_backpointer_get_key+0x229/0x570 [ 573.859894][ T31] ? __lock_acquire+0x1397/0x2100 [ 573.865021][ T31] ? bch2_evacuate_bucket+0x2f6/0x3280 [ 573.870518][ T31] ? mark_lock+0x9a/0x360 [ 573.875101][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.880172][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.886253][ T31] bch2_copygc+0x415d/0x4fa0 [ 573.890876][ T31] ? bch2_copygc+0x483/0x4fa0 [ 573.895640][ T31] ? __pfx_bch2_copygc+0x10/0x10 [ 573.900621][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 573.905713][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.910767][ T31] ? bch2_copygc+0x483/0x4fa0 [ 573.915487][ T31] ? bch2_copygc_wait_amount+0xc90/0xcf0 [ 573.921177][ T31] ? bch2_copygc+0x483/0x4fa0 [ 573.925928][ T31] ? bch2_trans_srcu_unlock+0x450/0x5c0 [ 573.931496][ T31] bch2_copygc_thread+0x6ef/0xba0 [ 573.936611][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 573.942229][ T31] ? bch2_copygc_thread+0x1ae/0xba0 [ 573.947522][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 573.953483][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 573.958716][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 573.964667][ T31] ? __kthread_parkme+0x169/0x1d0 [ 573.969711][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 573.975300][ T31] kthread+0x7a9/0x920 [ 573.979387][ T31] ? __pfx_kthread+0x10/0x10 [ 573.984054][ T31] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 573.989616][ T31] ? __pfx_kthread+0x10/0x10 [ 573.994264][ T31] ? __pfx_kthread+0x10/0x10 [ 573.998892][ T31] ? __pfx_kthread+0x10/0x10 [ 574.003542][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.008754][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 574.014001][ T31] ? __pfx_kthread+0x10/0x10 [ 574.018624][ T31] ret_from_fork+0x4b/0x80 [ 574.023107][ T31] ? __pfx_kthread+0x10/0x10 [ 574.027723][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.032542][ T31] [ 574.035582][ T31] [ 574.035582][ T31] Showing all locks held in the system: [ 574.043372][ T31] 1 lock held by khungtaskd/31: [ 574.048231][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 574.058197][ T31] 2 locks held by getty/5577: [ 574.062955][ T31] #0: ffff88814d3430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.072794][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 574.083040][ T31] 2 locks held by syz-executor393/5853: [ 574.088641][ T31] #0: ffff88807e7c00e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 574.098927][ T31] #1: ffff888073c80278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0 [ 574.108454][ T31] [ 574.110781][ T31] ============================================= [ 574.110781][ T31] [ 574.119341][ T31] NMI backtrace for cpu 0 [ 574.119360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller #0 [ 574.119379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 574.119389][ T31] Call Trace: [ 574.119396][ T31] [ 574.119404][ T31] dump_stack_lvl+0x241/0x360 [ 574.119427][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.119443][ T31] ? __pfx__printk+0x10/0x10 [ 574.119476][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 574.119503][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.119522][ T31] ? _printk+0xd5/0x120 [ 574.119545][ T31] ? __pfx__printk+0x10/0x10 [ 574.119570][ T31] ? __wake_up_klogd+0xcc/0x110 [ 574.119593][ T31] ? __pfx__printk+0x10/0x10 [ 574.119622][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.119645][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 574.119670][ T31] watchdog+0x1058/0x10a0 [ 574.119696][ T31] ? watchdog+0x1ea/0x10a0 [ 574.119725][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.119749][ T31] kthread+0x7a9/0x920 [ 574.119774][ T31] ? __pfx_kthread+0x10/0x10 [ 574.119801][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.119825][ T31] ? __pfx_kthread+0x10/0x10 [ 574.119848][ T31] ? __pfx_kthread+0x10/0x10 [ 574.119876][ T31] ? __pfx_kthread+0x10/0x10 [ 574.119900][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.119922][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 574.119946][ T31] ? __pfx_kthread+0x10/0x10 [ 574.119972][ T31] ret_from_fork+0x4b/0x80 [ 574.119993][ T31] ? __pfx_kthread+0x10/0x10 [ 574.120018][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.120049][ T31] [ 574.120055][ T31] Sending NMI from CPU 0 to CPUs 1: [ 574.282091][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 574.283089][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 574.283105][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller #0 [ 574.283126][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 574.283139][ T31] Call Trace: [ 574.283147][ T31] [ 574.283157][ T31] dump_stack_lvl+0x241/0x360 [ 574.283179][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 574.283203][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.283222][ T31] ? __pfx__printk+0x10/0x10 [ 574.283249][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.283300][ T31] ? vscnprintf+0x5d/0x90 [ 574.283327][ T31] panic+0x349/0x880 [ 574.283359][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 574.283386][ T31] ? __pfx_panic+0x10/0x10 [ 574.283421][ T31] ? irq_work_queue+0xd1/0x150 [ 574.283450][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.283478][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.283503][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.283528][ T31] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 574.283556][ T31] watchdog+0x1097/0x10a0 [ 574.283588][ T31] ? watchdog+0x1ea/0x10a0 [ 574.283622][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.283653][ T31] kthread+0x7a9/0x920 [ 574.283682][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283714][ T31] ? __pfx_watchdog+0x10/0x10 [ 574.283742][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283770][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283803][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283830][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.283857][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 574.283885][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283916][ T31] ret_from_fork+0x4b/0x80 [ 574.283940][ T31] ? __pfx_kthread+0x10/0x10 [ 574.283971][ T31] ret_from_fork_asm+0x1a/0x30 [ 574.284007][ T31] [ 574.467128][ T31] Kernel Offset: disabled [ 574.471449][ T31] Rebooting in 86400 seconds..