./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor127713081 <...> Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. execve("./syz-executor127713081", ["./syz-executor127713081"], 0x7fff173fdbb0 /* 10 vars */) = 0 brk(NULL) = 0x55555bb08000 brk(0x55555bb08d00) = 0x55555bb08d00 arch_prctl(ARCH_SET_FS, 0x55555bb08380) = 0 set_tid_address(0x55555bb08650) = 5826 set_robust_list(0x55555bb08660, 24) = 0 rseq(0x55555bb08ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor127713081", 4096) = 27 getrandom("\xd7\xc0\x52\x5c\x66\xd7\xe9\xce", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555bb08d00 brk(0x55555bb29d00) = 0x55555bb29d00 brk(0x55555bb2a000) = 0x55555bb2a000 mprotect(0x7fcc723de000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x55555bb08660, 24 [pid 5826] <... clone resumed>, child_tidptr=0x55555bb08650) = 5827 [pid 5827] <... set_robust_list resumed>) = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] setpgid(0, 0) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] write(3, "1000", 4) = 4 [pid 5827] close(3) = 0 executing program [pid 5827] write(1, "executing program\n", 18) = 18 [pid 5827] memfd_create("syzkaller", 0) = 3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcc69e00000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5827] munmap(0x7fcc69e00000, 138412032) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] close(4) = 0 [pid 5827] mkdir("./file0", 0777) = 0 syzkaller login: [ 91.298361][ T5827] loop0: detected capacity change from 0 to 32768 [ 91.390448][ T5827] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 91.390448][ T5827] allowing incompatible features above 0.0: (unknown version) [ 91.390448][ T5827] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 91.427397][ T5827] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 91.436781][ T5827] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 91.445410][ T5827] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 91.445410][ T5827] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 91.490186][ T5827] bcachefs (loop0): accounting_read... done [ 91.498191][ T5827] bcachefs (loop0): alloc_read... done [ 91.505322][ T5827] bcachefs (loop0): snapshots_read... done [ 91.512597][ T5827] bcachefs (loop0): check_allocations... [ 91.514991][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.515009][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 91.547122][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.547139][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2a20405ac3f40602 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 91.572415][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.572432][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 267fcf747c875937 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 91.597489][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.597506][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d682cebdf2a7eb26 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 91.622504][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.622521][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d771a06d670df06c written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 91.647786][ T5827] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 91.647803][ T5827] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b6c44d07df4e9bb7 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 91.676404][ T5827] done [ 91.683556][ T5827] bcachefs (loop0): going read-write [ 91.712485][ T5838] ODEBUG: object ffffc9000434fb90 is on stack ffffc90004348000, but NOT annotated. [ 91.712866][ T5838] [ 91.712875][ T5838] ====================================================== [ 91.712883][ T5838] WARNING: possible circular locking dependency detected [ 91.712903][ T5838] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 91.712914][ T5838] ------------------------------------------------------ [ 91.712922][ T5838] bch-copygc/loop/5838 is trying to acquire lock: [ 91.712933][ T5838] ffffffff8e132fc0 (console_owner){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 91.712981][ T5838] [ 91.712981][ T5838] but task is already holding lock: [ 91.712985][ T5838] ffffffff99cb5648 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 91.713017][ T5838] [ 91.713017][ T5838] which lock already depends on the new lock. [ 91.713017][ T5838] [ 91.713022][ T5838] [ 91.713022][ T5838] the existing dependency chain (in reverse order) is: [ 91.713027][ T5838] [ 91.713027][ T5838] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 91.713046][ T5838] lock_acquire+0x120/0x360 [ 91.713063][ T5838] _raw_spin_lock_irqsave+0xa7/0xf0 [ 91.713087][ T5838] debug_object_activate+0xbb/0x420 [ 91.713101][ T5838] insert_work+0x35/0x330 [ 91.713118][ T5838] __queue_work+0xcfc/0xfe0 [ 91.713138][ T5838] queue_work_on+0x181/0x270 [ 91.713158][ T5838] start_poll_synchronize_rcu_expedited+0xfc/0x140 [ 91.713174][ T5838] rcu_init+0x108/0x160 [ 91.713186][ T5838] start_kernel+0x1fb/0x500 [ 91.713203][ T5838] x86_64_start_reservations+0x24/0x30 [ 91.713217][ T5838] x86_64_start_kernel+0x143/0x1c0 [ 91.713229][ T5838] common_startup_64+0x13e/0x147 [ 91.713243][ T5838] [ 91.713243][ T5838] -> #3 (&pool->lock){-.-.}-{2:2}: [ 91.713261][ T5838] lock_acquire+0x120/0x360 [ 91.713277][ T5838] _raw_spin_lock+0x2e/0x40 [ 91.713294][ T5838] __queue_work+0x7b0/0xfe0 [ 91.713313][ T5838] queue_work_on+0x181/0x270 [ 91.713333][ T5838] rpm_suspend+0xe54/0x1720 [ 91.713345][ T5838] __pm_runtime_idle+0x12f/0x1a0 [ 91.713358][ T5838] __device_attach+0x342/0x400 [ 91.713372][ T5838] bus_probe_device+0x185/0x260 [ 91.713391][ T5838] device_add+0x7b6/0xb50 [ 91.713403][ T5838] serial_base_port_add+0x2f2/0x430 [ 91.713420][ T5838] serial_core_register_port+0x367/0x2700 [ 91.713441][ T5838] serial8250_register_8250_port+0x16db/0x2050 [ 91.713461][ T5838] serial_pnp_probe+0x527/0x790 [ 91.713481][ T5838] pnp_device_probe+0x30b/0x4c0 [ 91.713502][ T5838] really_probe+0x26a/0x9a0 [ 91.713517][ T5838] __driver_probe_device+0x18c/0x2f0 [ 91.713531][ T5838] driver_probe_device+0x4f/0x430 [ 91.713547][ T5838] __driver_attach+0x452/0x700 [ 91.713560][ T5838] bus_for_each_dev+0x230/0x2b0 [ 91.713585][ T5838] bus_add_driver+0x345/0x640 [ 91.713606][ T5838] driver_register+0x23a/0x320 [ 91.713624][ T5838] serial8250_init+0xc2/0x1c0 [ 91.713644][ T5838] do_one_initcall+0x233/0x820 [ 91.713656][ T5838] do_initcall_level+0x137/0x1f0 [ 91.713674][ T5838] do_initcalls+0x69/0xd0 [ 91.713692][ T5838] kernel_init_freeable+0x3d9/0x570 [ 91.713711][ T5838] kernel_init+0x1d/0x1d0 [ 91.713725][ T5838] ret_from_fork+0x3fc/0x770 [ 91.713742][ T5838] ret_from_fork_asm+0x1a/0x30 [ 91.713759][ T5838] [ 91.713759][ T5838] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 91.713777][ T5838] lock_acquire+0x120/0x360 [ 91.713794][ T5838] _raw_spin_lock_irqsave+0xa7/0xf0 [ 91.713812][ T5838] __pm_runtime_resume+0x10f/0x180 [ 91.713826][ T5838] __uart_start+0x171/0x440 [ 91.713848][ T5838] uart_write+0xdc/0x130 [ 91.713859][ T5838] n_tty_write+0xd35/0x11d0 [ 91.713875][ T5838] file_tty_write+0x500/0x990 [ 91.713896][ T5838] vfs_write+0x54b/0xa90 [ 91.713910][ T5838] ksys_write+0x145/0x250 [ 91.713924][ T5838] do_syscall_64+0xfa/0x3b0 [ 91.713935][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.713949][ T5838] [ 91.713949][ T5838] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 91.713967][ T5838] lock_acquire+0x120/0x360 [ 91.713983][ T5838] _raw_spin_lock_irqsave+0xa7/0xf0 [ 91.714001][ T5838] serial8250_console_write+0x17e/0x1ba0 [ 91.714015][ T5838] console_flush_all+0x728/0xc40 [ 91.714028][ T5838] console_unlock+0xc4/0x270 [ 91.714048][ T5838] vprintk_emit+0x5b7/0x7a0 [ 91.714068][ T5838] _printk+0xcf/0x120 [ 91.714080][ T5838] register_console+0xa8b/0xf90 [ 91.714093][ T5838] univ8250_console_init+0x52/0x90 [ 91.714113][ T5838] console_init+0x1a1/0x670 [ 91.714133][ T5838] start_kernel+0x2cc/0x500 [ 91.714150][ T5838] x86_64_start_reservations+0x24/0x30 [ 91.714163][ T5838] x86_64_start_kernel+0x143/0x1c0 [ 91.714175][ T5838] common_startup_64+0x13e/0x147 [ 91.714188][ T5838] [ 91.714188][ T5838] -> #0 (console_owner){....}-{0:0}: [ 91.714206][ T5838] validate_chain+0xb9b/0x2140 [ 91.714226][ T5838] __lock_acquire+0xab9/0xd20 [ 91.714243][ T5838] lock_acquire+0x120/0x360 [ 91.714259][ T5838] console_flush_all+0x6d2/0xc40 [ 91.714272][ T5838] console_unlock+0xc4/0x270 [ 91.714292][ T5838] vprintk_emit+0x5b7/0x7a0 [ 91.714312][ T5838] _printk+0xcf/0x120 [ 91.714323][ T5838] __debug_object_init+0x2c8/0x3c0 [ 91.714337][ T5838] rhashtable_init_noprof+0x7c0/0xbb0 [ 91.714358][ T5838] bch2_copygc_thread+0x116/0xdc0 [ 91.714373][ T5838] kthread+0x70e/0x8a0 [ 91.714385][ T5838] ret_from_fork+0x3fc/0x770 [ 91.714402][ T5838] ret_from_fork_asm+0x1a/0x30 [ 91.714414][ T5838] [ 91.714414][ T5838] other info that might help us debug this: [ 91.714414][ T5838] [ 91.714419][ T5838] Chain exists of: [ 91.714419][ T5838] console_owner --> &pool->lock --> &obj_hash[i].lock [ 91.714419][ T5838] [ 91.714440][ T5838] Possible unsafe locking scenario: [ 91.714440][ T5838] [ 91.714444][ T5838] CPU0 CPU1 [ 91.714449][ T5838] ---- ---- [ 91.714453][ T5838] lock(&obj_hash[i].lock); [ 91.714462][ T5838] lock(&pool->lock); [ 91.714472][ T5838] lock(&obj_hash[i].lock); [ 91.714482][ T5838] lock(console_owner); [ 91.714491][ T5838] [ 91.714491][ T5838] *** DEADLOCK *** [ 91.714491][ T5838] [ 91.714499][ T5838] 3 locks held by bch-copygc/loop/5838: [ 91.714508][ T5838] #0: ffffffff99cb5648 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 91.714542][ T5838] #1: ffffffff8e133020 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 91.714573][ T5838] #2: ffffffff8e01a8f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 91.714613][ T5838] [ 91.714613][ T5838] stack backtrace: [ 91.714626][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 91.714643][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.714655][ T5838] Call Trace: [ 91.714663][ T5838] [ 91.714670][ T5838] dump_stack_lvl+0x189/0x250 [ 91.714693][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.714715][ T5838] ? __pfx__printk+0x10/0x10 [ 91.714729][ T5838] ? print_lock_name+0xde/0x100 [ 91.714754][ T5838] print_circular_bug+0x2ee/0x310 [ 91.714778][ T5838] check_noncircular+0x134/0x160 [ 91.714803][ T5838] validate_chain+0xb9b/0x2140 [ 91.714834][ T5838] __lock_acquire+0xab9/0xd20 [ 91.714855][ T5838] ? console_flush_all+0x13a/0xc40 [ 91.714868][ T5838] lock_acquire+0x120/0x360 [ 91.714886][ T5838] ? console_flush_all+0x13a/0xc40 [ 91.714903][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 91.714917][ T5838] ? console_flush_all+0x13a/0xc40 [ 91.714932][ T5838] console_flush_all+0x6d2/0xc40 [ 91.714945][ T5838] ? console_flush_all+0x13a/0xc40 [ 91.714960][ T5838] ? console_flush_all+0x13a/0xc40 [ 91.714976][ T5838] ? __pfx_console_flush_all+0x10/0x10 [ 91.714994][ T5838] ? is_printk_cpu_sync_owner+0x32/0x40 [ 91.715012][ T5838] console_unlock+0xc4/0x270 [ 91.715035][ T5838] ? __pfx_console_unlock+0x10/0x10 [ 91.715058][ T5838] ? is_printk_cpu_sync_owner+0x32/0x40 [ 91.715076][ T5838] vprintk_emit+0x5b7/0x7a0 [ 91.715098][ T5838] ? __pfx_vprintk_emit+0x10/0x10 [ 91.715120][ T5838] ? __lock_acquire+0xab9/0xd20 [ 91.715141][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 91.715158][ T5838] _printk+0xcf/0x120 [ 91.715173][ T5838] ? __pfx__printk+0x10/0x10 [ 91.715190][ T5838] __debug_object_init+0x2c8/0x3c0 [ 91.715206][ T5838] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 91.715230][ T5838] rhashtable_init_noprof+0x7c0/0xbb0 [ 91.715254][ T5838] bch2_copygc_thread+0x116/0xdc0 [ 91.715271][ T5838] ? rcu_read_lock_sched_held+0x89/0x100 [ 91.715293][ T5838] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 91.715316][ T5838] ? arch_scale_cpu_capacity+0x18/0xb0 [ 91.715339][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 91.715370][ T5838] ? finish_task_switch+0x266/0x950 [ 91.715388][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.715414][ T5838] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 91.715449][ T5838] ? __kthread_parkme+0x7b/0x200 [ 91.715471][ T5838] ? __kthread_parkme+0x1a1/0x200 [ 91.715495][ T5838] kthread+0x70e/0x8a0 [ 91.715510][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 91.715526][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.715540][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.715560][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.715590][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.715604][ T5838] ret_from_fork+0x3fc/0x770 [ 91.715624][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 91.715645][ T5838] ? __switch_to_asm+0x39/0x70 [ 91.715658][ T5838] ? __switch_to_asm+0x33/0x70 [ 91.715671][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.715685][ T5838] ret_from_fork_asm+0x1a/0x30 [ 91.715704][ T5838] [ 91.772116][ T5827] bcachefs (loop0): journal_replay... [ 91.779277][ T5838] ------------[ cut here ]------------ [ 91.804197][ T5827] done [ 91.807639][ T5838] WARNING: CPU: 0 PID: 5838 at lib/debugobjects.c:655 __debug_object_init+0x2c9/0x3c0 [ 91.816328][ T5827] bcachefs (loop0): check_extents_to_backpointers... [ 91.820464][ T5838] Modules linked in: [ 92.703103][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 92.715523][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.725589][ T5838] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 92.731507][ T5838] Code: cc cc cc 41 ff c7 44 89 3d f4 2b 17 15 48 c7 c1 00 b8 e1 8b 48 c7 c7 60 b8 e1 8b 84 c0 48 0f 45 f9 48 89 de e8 28 3c 67 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 0c 67 cb 09 3b 05 0a [ 92.751130][ T5838] RSP: 0018:ffffc9000434f6e0 EFLAGS: 00010046 [ 92.757213][ T5838] RAX: 0000000000000050 RBX: ffffc9000434fb90 RCX: 7cb8b01c4020f700 [ 92.765194][ T5838] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 92.773171][ T5838] RBP: ffff8880345d9e20 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 92.781182][ T5838] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 92.789163][ T5838] R13: ffff8880795aa738 R14: dffffc0000000000 R15: 0000000000000001 [ 92.797141][ T5838] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 92.806077][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.812669][ T5838] CR2: 00007ffdbe78e7e8 CR3: 000000007248a000 CR4: 00000000003526f0 [ 92.820657][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.828647][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.836635][ T5838] Call Trace: [ 92.839923][ T5838] [ 92.842865][ T5838] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 92.848439][ T5838] rhashtable_init_noprof+0x7c0/0xbb0 [ 92.853851][ T5838] bch2_copygc_thread+0x116/0xdc0 [ 92.858910][ T5838] ? rcu_read_lock_sched_held+0x89/0x100 [ 92.864567][ T5838] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 92.870657][ T5838] ? arch_scale_cpu_capacity+0x18/0xb0 [ 92.876150][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 92.881727][ T5838] ? finish_task_switch+0x266/0x950 [ 92.886941][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.892192][ T5838] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 92.897683][ T5838] ? __kthread_parkme+0x7b/0x200 [ 92.902641][ T5838] ? __kthread_parkme+0x1a1/0x200 [ 92.907690][ T5838] kthread+0x70e/0x8a0 [ 92.911776][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 92.917421][ T5838] ? __pfx_kthread+0x10/0x10 [ 92.922023][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.927235][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.932467][ T5838] ? __pfx_kthread+0x10/0x10 [ 92.937076][ T5838] ret_from_fork+0x3fc/0x770 [ 92.941720][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 92.946884][ T5838] ? __switch_to_asm+0x39/0x70 [ 92.951679][ T5838] ? __switch_to_asm+0x33/0x70 [ 92.956483][ T5838] ? __pfx_kthread+0x10/0x10 [ 92.961093][ T5838] ret_from_fork_asm+0x1a/0x30 [ 92.965876][ T5838] [ 92.968916][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 92.976209][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 92.988630][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.998700][ T5838] Call Trace: [ 93.002011][ T5838] [ 93.004967][ T5838] dump_stack_lvl+0x99/0x250 [ 93.009604][ T5838] ? __asan_memcpy+0x40/0x70 [ 93.014225][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.019538][ T5838] ? __pfx__printk+0x10/0x10 [ 93.024160][ T5838] panic+0x2db/0x790 [ 93.028083][ T5838] ? __pfx_panic+0x10/0x10 [ 93.032520][ T5838] ? show_trace_log_lvl+0x4fb/0x550 [ 93.037760][ T5838] ? ret_from_fork_asm+0x1a/0x30 [ 93.042749][ T5838] __warn+0x31b/0x4b0 [ 93.046756][ T5838] ? __debug_object_init+0x2c9/0x3c0 [ 93.052055][ T5838] ? __debug_object_init+0x2c9/0x3c0 [ 93.057352][ T5838] report_bug+0x2be/0x4f0 [ 93.061700][ T5838] ? __debug_object_init+0x2c9/0x3c0 [ 93.067021][ T5838] ? __debug_object_init+0x2c9/0x3c0 [ 93.072340][ T5838] ? __debug_object_init+0x2cb/0x3c0 [ 93.077738][ T5838] handle_bug+0x84/0x160 [ 93.081996][ T5838] exc_invalid_op+0x1a/0x50 [ 93.086524][ T5838] asm_exc_invalid_op+0x1a/0x20 [ 93.091400][ T5838] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 93.097313][ T5838] Code: cc cc cc 41 ff c7 44 89 3d f4 2b 17 15 48 c7 c1 00 b8 e1 8b 48 c7 c7 60 b8 e1 8b 84 c0 48 0f 45 f9 48 89 de e8 28 3c 67 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 0c 67 cb 09 3b 05 0a [ 93.116933][ T5838] RSP: 0018:ffffc9000434f6e0 EFLAGS: 00010046 [ 93.123013][ T5838] RAX: 0000000000000050 RBX: ffffc9000434fb90 RCX: 7cb8b01c4020f700 [ 93.131003][ T5838] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 93.139295][ T5838] RBP: ffff8880345d9e20 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 93.147278][ T5838] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 93.155444][ T5838] R13: ffff8880795aa738 R14: dffffc0000000000 R15: 0000000000000001 [ 93.163439][ T5838] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 93.169013][ T5838] rhashtable_init_noprof+0x7c0/0xbb0 [ 93.174418][ T5838] bch2_copygc_thread+0x116/0xdc0 [ 93.179461][ T5838] ? rcu_read_lock_sched_held+0x89/0x100 [ 93.185148][ T5838] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 93.191241][ T5838] ? arch_scale_cpu_capacity+0x18/0xb0 [ 93.196744][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.202324][ T5838] ? finish_task_switch+0x266/0x950 [ 93.207547][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.212822][ T5838] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 93.218314][ T5838] ? __kthread_parkme+0x7b/0x200 [ 93.223272][ T5838] ? __kthread_parkme+0x1a1/0x200 [ 93.228317][ T5838] kthread+0x70e/0x8a0 [ 93.232403][ T5838] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.237967][ T5838] ? __pfx_kthread+0x10/0x10 [ 93.242567][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.247788][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.253007][ T5838] ? __pfx_kthread+0x10/0x10 [ 93.257607][ T5838] ret_from_fork+0x3fc/0x770 [ 93.262308][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 93.267439][ T5838] ? __switch_to_asm+0x39/0x70 [ 93.272214][ T5838] ? __switch_to_asm+0x33/0x70 [ 93.276990][ T5838] ? __pfx_kthread+0x10/0x10 [ 93.281600][ T5838] ret_from_fork_asm+0x1a/0x30 [ 93.286385][ T5838] [ 93.289751][ T5838] Kernel Offset: disabled [ 93.294083][ T5838] Rebooting in 86400 seconds..