./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4228796819 <...> Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. execve("./syz-executor4228796819", ["./syz-executor4228796819"], 0x7fffcd4617e0 /* 10 vars */) = 0 brk(NULL) = 0x55557fb95000 brk(0x55557fb95d00) = 0x55557fb95d00 arch_prctl(ARCH_SET_FS, 0x55557fb95380) = 0 set_tid_address(0x55557fb95650) = 5864 set_robust_list(0x55557fb95660, 24) = 0 rseq(0x55557fb95ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4228796819", 4096) = 28 getrandom("\x44\xe8\xff\x2b\x35\x6b\x50\x24", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557fb95d00 brk(0x55557fbb6d00) = 0x55557fbb6d00 brk(0x55557fbb7000) = 0x55557fbb7000 mprotect(0x7f07bfd84000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557fb95650) = 5865 ./strace-static-x86_64: Process 5865 attached [pid 5865] set_robust_list(0x55557fb95660, 24) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 executing program [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07b7800000 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5865] munmap(0x7f07b7800000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file0", 0777) = 0 [ 177.756666][ T5865] loop0: detected capacity change from 0 to 32768 [ 177.785293][ T5865] ======================================================= [ 177.785293][ T5865] WARNING: The mand mount option has been deprecated and [ 177.785293][ T5865] and is ignored by this kernel. Remove the mand [ 177.785293][ T5865] option from the mount to silence this warning. [ 177.785293][ T5865] ======================================================= [ 177.866452][ T5865] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none,nocow [ 177.866479][ T5865] allowing incompatible features above 0.0: (unknown version) [ 177.866492][ T5865] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 177.908170][ T5865] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 177.916598][ T5865] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 177.945960][ T5865] bcachefs (loop0): accounting_read... done [ 177.953827][ T5865] bcachefs (loop0): alloc_read... done [pid 5865] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "nocow,version_upgrade=none,noexcl,sxard_inode_numbers,") = 0 [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] chdir("./file0") = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_CLR_FD) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir(".", 0777) = -1 EEXIST (File exists) [ 177.960454][ T5865] bcachefs (loop0): snapshots_read... done [ 177.972703][ T5865] bcachefs (loop0): journal_replay... done [ 177.981172][ T5865] bcachefs (loop0): resume_logged_ops... done [ 177.988285][ T5865] bcachefs (loop0): delete_dead_inodes... done [ 177.998215][ T5865] bcachefs (loop0): done starting filesystem [ 178.022933][ T5865] bcachefs (loop0): going read-write [pid 5865] mount(NULL, ".", 0x200000000f40, MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_MANDLOCK|MS_NOATIME|MS_MOVE|MS_REC|MS_SILENT|MS_UNBINDABLE|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = 0 [pid 5865] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [ 178.075044][ T5876] bcachefs (loop0): backpointer doesn't match extent it points to: [ 178.075088][ T5876] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 178.075108][ T5876] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 178.075128][ T5876] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 178.139496][ T5876] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 178.139528][ T5876] scheduling recovery pass check_extents_to_backpointers (17) [pid 5865] open("./file1", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|O_CLOEXEC|0x3c, 060 [pid 5864] kill(-5865, SIGKILL) = 0 [pid 5864] kill(5865, SIGKILL) = 0 [pid 5864] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5864] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5864] getdents64(3, 0x55557fb966f0 /* 2 entries */, 32768) = 48 [pid 5864] getdents64(3, 0x55557fb966f0 /* 0 entries */, 32768) = 0 [pid 5864] close(3) = 0 [ 209.564613][ T5865] Allocator stuck? Waited for 30 seconds [ 209.564685][ T5865] Allocator debug: [ 209.564696][ T5865] capacity1536 [ 209.564706][ T5865] reserved 31232 [ 209.564723][ T5865] hidden 0 [ 209.564733][ T5865] btree 0 [ 209.564743][ T5865] data 0 [ 209.564754][ T5865] cached 0 [ 209.564764][ T5865] reserved 0 [ 209.564774][ T5865] online_reserved 768 [ 209.564803][ T5865] nr_inodes 0 [ 209.564814][ T5865] [ 209.564823][ T5865] freelist_wait waiting [ 209.564834][ T5865] open buckets allocated1 [ 209.564845][ T5865] open buckets total 1024 [ 209.564856][ T5865] open_buckets_wait empty [ 209.564867][ T5865] open_buckets_btree 0 [ 209.564877][ T5865] open_buckets_user 0 [ 209.564888][ T5865] btree reserve cache 0 [ 209.564898][ T5865] [ 209.564908][ T5865] Dev 0: [ 209.564917][ T5865] buckets sectors fragmented [ 209.564930][ T5865] free 0 0 0 [ 209.564955][ T5865] sb 0 0 0 [ 209.564967][ T5865] journal 0 0 0 [ 209.564979][ T5865] btree 0 0 0 [ 209.564992][ T5865] user 0 0 0 [ 209.565004][ T5865] cached 0 0 0 [ 209.565016][ T5865] parity 0 0 0 [ 209.565029][ T5865] stripe 0 0 0 [ 209.565041][ T5865] need_gc_gens 0 0 0 [ 209.565053][ T5865] need_discard 0 0 0 [ 209.565066][ T5865] unstriped 0 0 0 [ 209.565078][ T5865] capacity 128 [ 209.565088][ T5865] [ 209.565098][ T5865] reserves: [ 209.565107][ T5865] stripe 60 [ 209.565117][ T5865] normal 58 [ 209.565128][ T5865] copygc 56 [ 209.565138][ T5865] btree 28 [ 209.565149][ T5865] btree_copygc 0 [ 209.565159][ T5865] reclaim 0 [ 209.565170][ T5865] interior_updates 0 [ 209.565180][ T5865] [ 209.565189][ T5865] open buckets 0 [ 209.565200][ T5865] buckets to invalidate 0 [ 209.565210][ T5865] [ 209.565219][ T5865] Copygc debug: [ 209.565229][ T5865] running: 0 [ 209.565238][ T5865] copygc_wait:0 [ 209.565248][ T5865] copygc_wait_at:0 [ 209.565258][ T5865] Currently waiting for:0 B [ 209.565268][ T5865] Currently waiting since:640 KiB [ 209.565279][ T5865] Currently calculated wait: [ 209.565290][ T5865] loop0: 0 B [ 209.565299][ T5865] [<0>] bch2_copygc_thread+0xa9f/0xe00 [ 209.565311][ T5865] [<0>] kthread+0x70e/0x8a0 [ 209.565321][ T5865] [<0>] ret_from_fork+0x3fc/0x770 [ 209.565350][ T5865] [<0>] ret_from_fork_asm+0x1a/0x30 [ 209.565362][ T5865] [ 209.565371][ T5865] Journal debug: [ 209.565381][ T5865] flags: replay_done,running,may_skip_flush [ 209.565394][ T5865] dirty journal entries: 0/32768 [ 209.565405][ T5865] seq: 14 [ 209.565416][ T5865] seq_ondisk: 14 [ 209.565427][ T5865] last_seq: 15 [ 209.565438][ T5865] last_seq_ondisk: 14 [ 209.565449][ T5865] flushed_seq_ondisk: 14 [ 209.565460][ T5865] watermark: stripe [ 209.565470][ T5865] each entry reserved: 321 [ 209.565480][ T5865] nr flush writes: 1 [ 209.565491][ T5865] nr noflush writes: 0 [ 209.565502][ T5865] average write size: 1.28 KiB [ 209.565513][ T5865] free buf: 65536 [ 209.565524][ T5865] nr direct reclaim: 0 [ 209.565535][ T5865] nr background reclaim: 1 [ 209.565546][ T5865] reclaim kicked: 0 [ 209.565557][ T5865] reclaim runs in: 0 ms [ 209.565568][ T5865] blocked: 0 [ 209.565579][ T5865] current entry sectors: 256 [ 209.565590][ T5865] current entry error: (No error) [ 209.565601][ T5865] current entry: closed [ 209.565613][ T5865] unwritten entries: [ 209.565623][ T5865] last buf closed [ 209.565633][ T5865] space: [ 209.565643][ T5865] discarded 256:1536 [ 209.565654][ T5865] clean ondisk 256:1536 [ 209.565666][ T5865] clean 256:1536 [ 209.565677][ T5865] total 256:2048 [ 209.565688][ T5865] dev 0: [ 209.565698][ T5865] durability 1: [ 209.565708][ T5865] nr 8 [ 209.565737][ T5865] bucket size 256 [ 209.565747][ T5865] available 6:248 [ 209.565758][ T5865] discard_idx 0 [ 209.565769][ T5865] dirty_ondisk 0 (seq 14) [ 209.565780][ T5865] dirty_idx 0 (seq 14) [ 209.565791][ T5865] cur_idx 0 (seq 14) [ 209.565802][ T5865] replicas want 1 need 1 [ 429.716159][ T31] INFO: task syz-executor422:5865 blocked for more than 143 seconds. [ 429.724488][ T31] Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 [ 429.732235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.740982][ T31] task:syz-executor422 state:D stack:19784 pid:5865 tgid:5865 ppid:5864 task_flags:0x400140 flags:0x00004006 [ 429.753056][ T31] Call Trace: [ 429.756379][ T31] [ 429.759341][ T31] __schedule+0x16aa/0x4c90 [ 429.763948][ T31] ? schedule+0x165/0x360 [ 429.768308][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.773226][ T31] ? __pfx___schedule+0x10/0x10 [ 429.778119][ T31] ? schedule+0x91/0x360 [ 429.782376][ T31] schedule+0x165/0x360 [ 429.786599][ T31] ? __closure_sync+0x113/0x220 [ 429.791499][ T31] __closure_sync+0x163/0x220 [ 429.796261][ T31] ? __pfx___closure_sync+0x10/0x10 [ 429.801505][ T31] ? __bch2_wait_on_allocator+0x1c7/0x240 [ 429.807323][ T31] bch2_btree_update_start+0x18dc/0x1de0 [ 429.813088][ T31] ? __bitmap_weight+0xe4/0x100 [ 429.817984][ T31] ? bch2_btree_split_leaf+0x14b/0x8e0 [ 429.823520][ T31] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 429.829542][ T31] ? __pfx_bch2_btree_path_peek_slot+0x10/0x10 [ 429.835769][ T31] ? __asan_memcpy+0x40/0x70 [ 429.840402][ T31] ? __pfx_closure_sync_fn+0x10/0x10 [ 429.845784][ T31] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 429.851635][ T31] ? __asan_memcpy+0x40/0x70 [ 429.856309][ T31] bch2_btree_split_leaf+0x14b/0x8e0 [ 429.861673][ T31] bch2_trans_commit_error+0x1b7/0x1130 [ 429.867285][ T31] ? bch2_logged_op_start+0x177/0x290 [ 429.872704][ T31] ? six_unlock_ip+0x302/0x430 [ 429.877552][ T31] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 429.883600][ T31] ? bch2_trans_unlock_updates_write+0xc22/0xd50 [ 429.889995][ T31] __bch2_trans_commit+0x1bb5/0x8870 [ 429.895410][ T31] ? bch2_logged_op_start+0x177/0x290 [ 429.900840][ T31] ? __pfx___bch2_trans_commit+0x10/0x10 [ 429.906565][ T31] ? bch2_bkey_get_empty_slot+0x415/0x750 [ 429.912331][ T31] ? bch2_path_put+0x1b6/0x15d0 [ 429.917250][ T31] ? __pfx_bch2_bkey_get_empty_slot+0x10/0x10 [ 429.923409][ T31] bch2_logged_op_start+0x177/0x290 [ 429.928636][ T31] ? __pfx_bch2_logged_op_start+0x10/0x10 [ 429.934411][ T31] ? bch2_truncate+0xeb/0x200 [ 429.939121][ T31] ? bch2_bkey_get_empty_slot+0x100/0x750 [ 429.944901][ T31] ? __bch2_trans_get+0x9c2/0xd80 [ 429.949964][ T31] bch2_truncate+0x128/0x200 [ 429.954627][ T31] ? __pfx_bch2_truncate+0x10/0x10 [ 429.959765][ T31] ? unmap_mapping_range+0xde/0x170 [ 429.965050][ T31] ? truncate_setsize+0xcf/0xf0 [ 429.969936][ T31] bchfs_truncate+0x8b1/0xc20 [ 429.974717][ T31] ? __pfx_bchfs_truncate+0x10/0x10 [ 429.979944][ T31] ? __bch2_trans_get+0x9c2/0xd80 [ 429.985055][ T31] ? __pfx_bch2_subvol_is_ro+0x10/0x10 [ 429.990556][ T31] ? setattr_prepare+0x1e7/0xac0 [ 429.995600][ T31] ? bch2_setattr+0x1a7/0x220 [ 430.000319][ T31] ? __pfx_bch2_setattr+0x10/0x10 [ 430.005406][ T31] notify_change+0xb36/0xe40 [ 430.010042][ T31] do_truncate+0x1a4/0x220 [ 430.014538][ T31] ? __pfx_do_truncate+0x10/0x10 [ 430.019541][ T31] path_openat+0x306c/0x3830 [ 430.024251][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.029226][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.035383][ T31] do_filp_open+0x1fa/0x410 [ 430.039926][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.044838][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.049917][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.054843][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.059221][ T31] do_sys_openat2+0x121/0x1c0 [ 430.063973][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.069217][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.074059][ T31] __x64_sys_open+0x11e/0x150 [ 430.078779][ T31] do_syscall_64+0xfa/0x3b0 [ 430.083357][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.088594][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.094747][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.099457][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.105442][ T31] RIP: 0033:0x7f07bfd01c59 [ 430.109898][ T31] RSP: 002b:00007ffd368088f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.118384][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f07bfd01c59 [ 430.126425][ T31] RDX: 0000000000000030 RSI: 00000000001c927e RDI: 0000200000000180 [ 430.134484][ T31] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000200000000000 [ 430.142495][ T31] R10: 00007ffd368087c0 R11: 0000000000000246 R12: 0000200000000080 [ 430.150550][ T31] R13: 00007ffd36808b58 R14: 431bde82d7b634db R15: 00007f07bfd4a03b [ 430.158600][ T31] [ 430.161745][ T31] [ 430.161745][ T31] Showing all locks held in the system: [ 430.169520][ T31] 1 lock held by khungtaskd/31: [ 430.174443][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.184399][ T31] 1 lock held by klogd/5197: [ 430.189018][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 430.199027][ T31] 2 locks held by getty/5600: [ 430.203759][ T31] #0: ffff888030ea40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.213639][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 430.223849][ T31] 5 locks held by syz-executor422/5865: [ 430.229393][ T31] #0: ffff88807e866428 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 430.238646][ T31] #1: ffff8880762608e0 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 430.249145][ T31] #2: ffff888074a80a50 (&c->snapshot_create_lock){.+.+}-{4:4}, at: bch2_truncate+0xeb/0x200 [ 430.259428][ T31] #3: ffff888074a84398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 [ 430.270244][ T31] #4: ffff888074aa6710 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0 [ 430.280480][ T31] [ 430.282839][ T31] ============================================= [ 430.282839][ T31] [ 430.291786][ T31] NMI backtrace for cpu 1 [ 430.291808][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 430.291832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.291844][ T31] Call Trace: [ 430.291853][ T31] [ 430.291861][ T31] dump_stack_lvl+0x189/0x250 [ 430.291887][ T31] ? __wake_up_klogd+0xd9/0x110 [ 430.291919][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.291942][ T31] ? __pfx__printk+0x10/0x10 [ 430.291983][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.292020][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.292050][ T31] ? _printk+0xcf/0x120 [ 430.292082][ T31] ? __pfx__printk+0x10/0x10 [ 430.292111][ T31] ? debug_show_all_locks+0x2e/0x180 [ 430.292135][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.292171][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.292206][ T31] watchdog+0xfee/0x1030 [ 430.292242][ T31] ? watchdog+0x1de/0x1030 [ 430.292283][ T31] kthread+0x70e/0x8a0 [ 430.292316][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.292348][ T31] ? __pfx_kthread+0x10/0x10 [ 430.292379][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.292400][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.292420][ T31] ? __pfx_kthread+0x10/0x10 [ 430.292450][ T31] ret_from_fork+0x3fc/0x770 [ 430.292475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.292502][ T31] ? __switch_to_asm+0x39/0x70 [ 430.292528][ T31] ? __switch_to_asm+0x33/0x70 [ 430.292553][ T31] ? __pfx_kthread+0x10/0x10 [ 430.292583][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.292636][ T31] [ 430.292644][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.455688][ C0] NMI backtrace for cpu 0 [ 430.455705][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 430.455725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.455737][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 430.455760][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 430.455775][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 430.455791][ C0] RAX: dee44e75fbf37800 RBX: ffffffff81976918 RCX: dee44e75fbf37800 [ 430.455819][ C0] RDX: 0000000000000001 RSI: ffffffff8d982ff2 RDI: ffffffff8be1ba80 [ 430.455831][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 430.455844][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 430.455857][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 430.455868][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 430.455882][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.455894][ C0] CR2: 000056096836e660 CR3: 000000000df38000 CR4: 00000000003526f0 [ 430.455908][ C0] Call Trace: [ 430.455917][ C0] [ 430.455924][ C0] default_idle+0x13/0x20 [ 430.455945][ C0] default_idle_call+0x74/0xb0 [ 430.455968][ C0] do_idle+0x1e8/0x510 [ 430.455991][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.456009][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.456027][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.456056][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.456087][ C0] cpu_startup_entry+0x44/0x60 [ 430.456106][ C0] rest_init+0x2de/0x300 [ 430.456128][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 430.456167][ C0] start_kernel+0x47d/0x500 [ 430.456190][ C0] x86_64_start_reservations+0x24/0x30 [ 430.456215][ C0] x86_64_start_kernel+0x143/0x1c0 [ 430.456239][ C0] common_startup_64+0x13e/0x147 [ 430.456270][ C0] [ 430.456678][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.663169][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 430.675000][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.685072][ T31] Call Trace: [ 430.688453][ T31] [ 430.691395][ T31] dump_stack_lvl+0x99/0x250 [ 430.696005][ T31] ? __asan_memcpy+0x40/0x70 [ 430.700637][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.705849][ T31] ? __pfx__printk+0x10/0x10 [ 430.710463][ T31] panic+0x2db/0x790 [ 430.714381][ T31] ? __pfx_panic+0x10/0x10 [ 430.718815][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 430.724643][ T31] ? irq_work_queue+0xc3/0x140 [ 430.729440][ T31] watchdog+0x102d/0x1030 [ 430.733789][ T31] ? watchdog+0x1de/0x1030 [ 430.738234][ T31] kthread+0x70e/0x8a0 [ 430.742335][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.747051][ T31] ? __pfx_kthread+0x10/0x10 [ 430.751657][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.756869][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.762084][ T31] ? __pfx_kthread+0x10/0x10 [ 430.766692][ T31] ret_from_fork+0x3fc/0x770 [ 430.771301][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.776427][ T31] ? __switch_to_asm+0x39/0x70 [ 430.781209][ T31] ? __switch_to_asm+0x33/0x70 [ 430.785991][ T31] ? __pfx_kthread+0x10/0x10 [ 430.790596][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.795410][ T31] [ 430.798625][ T31] Kernel Offset: disabled [ 430.802969][ T31] Rebooting in 86400 seconds..