./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1363033637 <...> Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. execve("./syz-executor1363033637", ["./syz-executor1363033637"], 0x7ffdb4a6ad10 /* 10 vars */) = 0 brk(NULL) = 0x5555847b5000 brk(0x5555847b5d00) = 0x5555847b5d00 arch_prctl(ARCH_SET_FS, 0x5555847b5380) = 0 set_tid_address(0x5555847b5650) = 5867 set_robust_list(0x5555847b5660, 24) = 0 rseq(0x5555847b5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1363033637", 4096) = 28 getrandom("\x90\x45\x79\xac\x0b\x70\x42\x65", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555847b5d00 brk(0x5555847d6d00) = 0x5555847d6d00 brk(0x5555847d7000) = 0x5555847d7000 mprotect(0x7fe41eed1000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached , child_tidptr=0x5555847b5650) = 5869 [pid 5869] set_robust_list(0x5555847b5660, 24) = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 executing program [pid 5869] write(1, "executing program\n", 18) = 18 [pid 5869] memfd_create("syzkaller", 0) = 3 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe416a00000 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5869] munmap(0x7fe416a00000, 138412032) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] close(4) = 0 [pid 5869] mkdir("./file0", 0777) = 0 [ 178.820025][ T5869] loop0: detected capacity change from 0 to 32768 [ 178.852040][ T5869] ======================================================= [ 178.852040][ T5869] WARNING: The mand mount option has been deprecated and [ 178.852040][ T5869] and is ignored by this kernel. Remove the mand [ 178.852040][ T5869] option from the mount to silence this warning. [ 178.852040][ T5869] ======================================================= [ 178.938090][ T5869] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,noexcl,read_only,version_upgrade=none,nocow [ 178.938116][ T5869] allowing incompatible features above 0.0: (unknown version) [ 178.938127][ T5869] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 178.979200][ T5869] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 178.988072][ T5869] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 179.013888][ T5869] bcachefs (loop0): accounting_read... done [ 179.021689][ T5869] bcachefs (loop0): alloc_read... done [ 179.028134][ T5869] bcachefs (loop0): snapshots_read... done [pid 5869] mount("/dev/loop0", "./file0", "bcachefs", MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_POSIXACL|MS_STRICTATIME, "nocow,version_upgrade=none,noexcl,shard_inode_numbers,") = 0 [pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file0") = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_CLR_FD) = 0 [pid 5869] close(4) = 0 [ 179.039793][ T5869] bcachefs (loop0): journal_replay... done [ 179.048089][ T5869] bcachefs (loop0): resume_logged_ops... done [ 179.055046][ T5869] bcachefs (loop0): delete_dead_inodes... done [ 179.064618][ T5869] bcachefs (loop0): done starting filesystem [pid 5869] mkdir(".", 0777) = -1 EEXIST (File exists) [ 179.118456][ T5869] bcachefs (loop0): going read-write [pid 5869] mount(NULL, ".", 0x200000000f40, MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_NOATIME|MS_MOVE|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = 0 [pid 5869] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4 [pid 5869] chdir(".") = 0 [ 179.172434][ T5880] bcachefs (loop0): backpointer doesn't match extent it points to: [ 179.172473][ T5880] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX [ 179.172489][ T5880] u64s 8 type extent 1073741825:24:U32_MAX len 24 ver 2: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum chacha20_poly1305_80 5c1d:75853c64f7009f9d compress lz4 ptr: 0:34:8 gen 0 [ 179.172506][ T5880] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=1073741825:24:U32_MAX, fixing [ 179.235404][ T5880] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 179.235431][ T5880] scheduling recovery pass check_extents_to_backpointers (17) [pid 5869] open("./file1", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 006 [pid 5867] kill(-5869, SIGKILL) = 0 [pid 5867] kill(5869, SIGKILL) = 0 [pid 5867] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5867] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 5867] getdents64(3, 0x5555847b66f0 /* 2 entries */, 32768) = 48 [pid 5867] getdents64(3, 0x5555847b66f0 /* 0 entries */, 32768) = 0 [pid 5867] close(3) = 0 [ 210.896931][ T5869] Allocator stuck? Waited for 30 seconds [ 210.896976][ T5869] Allocator debug: [ 210.896981][ T5869] capacity1536 [ 210.896986][ T5869] reserved 31232 [ 210.896991][ T5869] hidden 0 [ 210.896996][ T5869] btree 0 [ 210.897001][ T5869] data 0 [ 210.897006][ T5869] cached 0 [ 210.897011][ T5869] reserved 0 [ 210.897016][ T5869] online_reserved 768 [ 210.897021][ T5869] nr_inodes 0 [ 210.897026][ T5869] [ 210.897030][ T5869] freelist_wait waiting [ 210.897035][ T5869] open buckets allocated1 [ 210.897040][ T5869] open buckets total 1024 [ 210.897045][ T5869] open_buckets_wait empty [ 210.897050][ T5869] open_buckets_btree 0 [ 210.897054][ T5869] open_buckets_user 0 [ 210.897059][ T5869] btree reserve cache 0 [ 210.897064][ T5869] [ 210.897068][ T5869] Dev 0: [ 210.897073][ T5869] buckets sectors fragmented [ 210.897079][ T5869] free 0 0 0 [ 210.897084][ T5869] sb 0 0 0 [ 210.897090][ T5869] journal 0 0 0 [ 210.897096][ T5869] btree 0 0 0 [ 210.897101][ T5869] user 0 0 0 [ 210.897107][ T5869] cached 0 0 0 [ 210.897113][ T5869] parity 0 0 0 [ 210.897118][ T5869] stripe 0 0 0 [ 210.897124][ T5869] need_gc_gens 0 0 0 [ 210.897130][ T5869] need_discard 0 0 0 [ 210.897135][ T5869] unstriped 0 0 0 [ 210.897141][ T5869] capacity 128 [ 210.897146][ T5869] [ 210.897150][ T5869] reserves: [ 210.897155][ T5869] stripe 60 [ 210.897160][ T5869] normal 58 [ 210.897165][ T5869] copygc 56 [ 210.897170][ T5869] btree 28 [ 210.897175][ T5869] btree_copygc 0 [ 210.897180][ T5869] reclaim 0 [ 210.897185][ T5869] interior_updates 0 [ 210.897190][ T5869] [ 210.897194][ T5869] open buckets 0 [ 210.897199][ T5869] buckets to invalidate 0 [ 210.897204][ T5869] [ 210.897208][ T5869] Copygc debug: [ 210.897213][ T5869] running: 0 [ 210.897217][ T5869] copygc_wait:0 [ 210.897222][ T5869] copygc_wait_at:0 [ 210.897227][ T5869] Currently waiting for:0 B [ 210.897232][ T5869] Currently waiting since:640 KiB [ 210.897237][ T5869] Currently calculated wait: [ 210.897241][ T5869] loop0: 0 B [ 210.897246][ T5869] [<0>] bch2_copygc_thread+0xa9f/0xe00 [ 210.897251][ T5869] [<0>] kthread+0x711/0x8a0 [ 210.897256][ T5869] [<0>] ret_from_fork+0x3fc/0x770 [ 210.897261][ T5869] [<0>] ret_from_fork_asm+0x1a/0x30 [ 210.897266][ T5869] [ 210.897270][ T5869] Journal debug: [ 210.897275][ T5869] flags: replay_done,running,may_skip_flush [ 210.897281][ T5869] dirty journal entries: 0/32768 [ 210.897286][ T5869] seq: 14 [ 210.897291][ T5869] seq_ondisk: 14 [ 210.897296][ T5869] last_seq: 15 [ 210.897301][ T5869] last_seq_ondisk: 14 [ 210.897306][ T5869] flushed_seq_ondisk: 14 [ 210.897310][ T5869] watermark: stripe [ 210.897315][ T5869] each entry reserved: 321 [ 210.897320][ T5869] nr flush writes: 1 [ 210.897325][ T5869] nr noflush writes: 0 [ 210.897330][ T5869] average write size: 1.28 KiB [ 210.897335][ T5869] free buf: 65536 [ 210.897340][ T5869] nr direct reclaim: 0 [ 210.897351][ T5869] nr background reclaim: 1 [ 210.897355][ T5869] reclaim kicked: 0 [ 210.897360][ T5869] reclaim runs in: 0 ms [ 210.897365][ T5869] blocked: 0 [ 210.897370][ T5869] current entry sectors: 256 [ 210.897375][ T5869] current entry error: (No error) [ 210.897380][ T5869] current entry: closed [ 210.897385][ T5869] unwritten entries: [ 210.897390][ T5869] last buf closed [ 210.897395][ T5869] space: [ 210.897399][ T5869] discarded 256:1536 [ 210.897404][ T5869] clean ondisk 256:1536 [ 210.897409][ T5869] clean 256:1536 [ 210.897415][ T5869] total 256:2048 [ 210.897420][ T5869] dev 0: [ 210.897424][ T5869] durability 1: [ 210.897429][ T5869] nr 8 [ 210.897434][ T5869] bucket size 256 [ 210.897439][ T5869] available 6:248 [ 210.897444][ T5869] discard_idx 0 [ 210.897449][ T5869] dirty_ondisk 0 (seq 14) [ 210.897454][ T5869] dirty_idx 0 (seq 14) [ 210.897459][ T5869] cur_idx 0 (seq 14) [ 210.897464][ T5869] replicas want 1 need 1 [ 429.766428][ T31] INFO: task syz-executor136:5869 blocked for more than 143 seconds. [ 429.774615][ T31] Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 [ 429.782308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.791142][ T31] task:syz-executor136 state:D stack:19784 pid:5869 tgid:5869 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 429.803199][ T31] Call Trace: [ 429.806546][ T31] [ 429.809469][ T31] __schedule+0x16a2/0x4cb0 [ 429.813998][ T31] ? schedule+0x165/0x360 [ 429.818376][ T31] ? __lock_acquire+0xab9/0xd20 [ 429.823229][ T31] ? __pfx___schedule+0x10/0x10 [ 429.828157][ T31] ? schedule+0x91/0x360 [ 429.832416][ T31] schedule+0x165/0x360 [ 429.836618][ T31] ? __closure_sync+0x113/0x220 [ 429.841483][ T31] __closure_sync+0x163/0x220 [ 429.846281][ T31] ? __pfx___closure_sync+0x10/0x10 [ 429.851496][ T31] ? __bch2_wait_on_allocator+0x1c7/0x240 [ 429.857280][ T31] bch2_btree_update_start+0x18dc/0x1de0 [ 429.862938][ T31] ? __bitmap_weight+0xe4/0x100 [ 429.867889][ T31] ? bch2_btree_split_leaf+0x14b/0x8e0 [ 429.873390][ T31] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 429.879430][ T31] ? __pfx_bch2_btree_path_peek_slot+0x10/0x10 [ 429.885618][ T31] ? __asan_memcpy+0x40/0x70 [ 429.890280][ T31] ? __pfx_closure_sync_fn+0x10/0x10 [ 429.895588][ T31] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 429.901689][ T31] ? __asan_memcpy+0x40/0x70 [ 429.906357][ T31] bch2_btree_split_leaf+0x14b/0x8e0 [ 429.911688][ T31] bch2_trans_commit_error+0x1b7/0x1130 [ 429.917317][ T31] ? bch2_logged_op_start+0x177/0x290 [ 429.922716][ T31] ? six_unlock_ip+0x302/0x430 [ 429.927560][ T31] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 429.933555][ T31] ? bch2_trans_unlock_updates_write+0xc22/0xd50 [ 429.939931][ T31] __bch2_trans_commit+0x1bb5/0x8870 [ 429.945242][ T31] ? bch2_logged_op_start+0x177/0x290 [ 429.950751][ T31] ? __pfx___bch2_trans_commit+0x10/0x10 [ 429.956418][ T31] ? bch2_bkey_get_empty_slot+0x415/0x750 [ 429.962131][ T31] ? bch2_path_put+0x1b6/0x15d0 [ 429.967013][ T31] ? __pfx_bch2_bkey_get_empty_slot+0x10/0x10 [ 429.973102][ T31] bch2_logged_op_start+0x177/0x290 [ 429.978348][ T31] ? __pfx_bch2_logged_op_start+0x10/0x10 [ 429.984071][ T31] ? bch2_truncate+0xeb/0x200 [ 429.988789][ T31] ? bch2_bkey_get_empty_slot+0x100/0x750 [ 429.994516][ T31] ? __bch2_trans_get+0x9c2/0xd80 [ 429.999607][ T31] bch2_truncate+0x128/0x200 [ 430.004223][ T31] ? __pfx_bch2_truncate+0x10/0x10 [ 430.009393][ T31] ? unmap_mapping_range+0xde/0x170 [ 430.014618][ T31] ? truncate_setsize+0xcf/0xf0 [ 430.019511][ T31] bchfs_truncate+0x8b1/0xc20 [ 430.024205][ T31] ? __pfx_bchfs_truncate+0x10/0x10 [ 430.029518][ T31] ? __bch2_trans_get+0x9c2/0xd80 [ 430.034581][ T31] ? __pfx_bch2_subvol_is_ro+0x10/0x10 [ 430.040125][ T31] ? setattr_prepare+0x1e7/0xac0 [ 430.045099][ T31] ? bch2_setattr+0x1a7/0x220 [ 430.049828][ T31] ? __pfx_bch2_setattr+0x10/0x10 [ 430.054869][ T31] notify_change+0xb33/0xe40 [ 430.059514][ T31] do_truncate+0x1a4/0x220 [ 430.063961][ T31] ? __pfx_do_truncate+0x10/0x10 [ 430.068974][ T31] path_openat+0x306c/0x3830 [ 430.073604][ T31] ? __pfx_path_openat+0x10/0x10 [ 430.078591][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.084684][ T31] do_filp_open+0x1fa/0x410 [ 430.089220][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.094081][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 430.099193][ T31] ? _raw_spin_unlock+0x28/0x50 [ 430.104073][ T31] ? alloc_fd+0x64c/0x6c0 [ 430.108450][ T31] do_sys_openat2+0x121/0x1c0 [ 430.113147][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 430.118392][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.123171][ T31] __x64_sys_open+0x11e/0x150 [ 430.127899][ T31] do_syscall_64+0xfa/0x3b0 [ 430.132420][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.137695][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.143781][ T31] ? clear_bhb_loop+0x60/0xb0 [ 430.148506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.154408][ T31] RIP: 0033:0x7fe41ee4ec59 [ 430.158909][ T31] RSP: 002b:00007fffccf6a418 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 430.167405][ T31] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fe41ee4ec59 [ 430.175399][ T31] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0 [ 430.183469][ T31] RBP: 0000200000000080 R08: 0000000000000000 R09: 0000200000000000 [ 430.191500][ T31] R10: 00007fffccf6a2e0 R11: 0000000000000246 R12: 00007fffccf6a450 [ 430.199524][ T31] R13: 00007fffccf6a678 R14: 431bde82d7b634db R15: 00007fe41ee9703b [ 430.207545][ T31] [ 430.210592][ T31] [ 430.210592][ T31] Showing all locks held in the system: [ 430.218384][ T31] 1 lock held by khungtaskd/31: [ 430.223248][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.233220][ T31] 2 locks held by getty/5598: [ 430.237934][ T31] #0: ffff88814c30c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.247762][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 430.257945][ T31] 5 locks held by syz-executor136/5869: [ 430.263534][ T31] #0: ffff88807d02e428 (sb_writers#8){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 430.272800][ T31] #1: ffff8880731588e0 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 430.283238][ T31] #2: ffff888072500a50 (&c->snapshot_create_lock){.+.+}-{4:4}, at: bch2_truncate+0xeb/0x200 [ 430.293512][ T31] #3: ffff888072504398 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0xaf/0x220 [ 430.304294][ T31] #4: ffff888072526710 (&c->gc_lock){.+.+}-{4:4}, at: bch2_btree_update_start+0x542/0x1de0 [ 430.314474][ T31] [ 430.316835][ T31] ============================================= [ 430.316835][ T31] [ 430.325274][ T31] NMI backtrace for cpu 1 [ 430.325290][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 430.325302][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.325310][ T31] Call Trace: [ 430.325315][ T31] [ 430.325320][ T31] dump_stack_lvl+0x189/0x250 [ 430.325336][ T31] ? __wake_up_klogd+0xd9/0x110 [ 430.325352][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.325363][ T31] ? __pfx__printk+0x10/0x10 [ 430.325382][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 430.325398][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 430.325410][ T31] ? _printk+0xcf/0x120 [ 430.325424][ T31] ? __pfx__printk+0x10/0x10 [ 430.325437][ T31] ? debug_show_all_locks+0x2e/0x180 [ 430.325447][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.325463][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.325478][ T31] watchdog+0xfee/0x1030 [ 430.325495][ T31] ? watchdog+0x1de/0x1030 [ 430.325513][ T31] kthread+0x711/0x8a0 [ 430.325528][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.325542][ T31] ? __pfx_kthread+0x10/0x10 [ 430.325556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.325575][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.325589][ T31] ? __pfx_kthread+0x10/0x10 [ 430.325602][ T31] ret_from_fork+0x3fc/0x770 [ 430.325614][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.325627][ T31] ? __switch_to_asm+0x39/0x70 [ 430.325638][ T31] ? __switch_to_asm+0x33/0x70 [ 430.325650][ T31] ? __pfx_kthread+0x10/0x10 [ 430.325663][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.325682][ T31] [ 430.325686][ T31] Sending NMI from CPU 1 to CPUs 0: [ 430.487306][ C0] NMI backtrace for cpu 0 [ 430.487322][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 430.487341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.487351][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 430.487381][ C0] Code: c3 dd 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 05 20 00 f3 0f 1e fa fb f4 98 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 430.487394][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 430.487410][ C0] RAX: 431aecfd02f5e000 RBX: ffffffff81975c88 RCX: 431aecfd02f5e000 [ 430.487422][ C0] RDX: 0000000000000001 RSI: ffffffff8d984099 RDI: ffffffff8be1c400 [ 430.487433][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 430.487445][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0bef0 [ 430.487457][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 430.487467][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 430.487480][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.487491][ C0] CR2: 0000561e8689c168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 430.487506][ C0] Call Trace: [ 430.487515][ C0] [ 430.487521][ C0] default_idle+0x13/0x20 [ 430.487538][ C0] default_idle_call+0x74/0xb0 [ 430.487557][ C0] do_idle+0x1e8/0x510 [ 430.487578][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.487602][ C0] cpu_startup_entry+0x44/0x60 [ 430.487619][ C0] rest_init+0x2de/0x300 [ 430.487637][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 430.487670][ C0] start_kernel+0x47d/0x500 [ 430.487689][ C0] x86_64_start_reservations+0x24/0x30 [ 430.487710][ C0] x86_64_start_kernel+0x143/0x1c0 [ 430.487731][ C0] common_startup_64+0x13e/0x147 [ 430.487759][ C0] [ 430.488302][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 430.677086][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) [ 430.688887][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.698957][ T31] Call Trace: [ 430.702235][ T31] [ 430.705162][ T31] dump_stack_lvl+0x99/0x250 [ 430.709756][ T31] ? __asan_memcpy+0x40/0x70 [ 430.714356][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.719554][ T31] ? __pfx__printk+0x10/0x10 [ 430.724156][ T31] panic+0x2db/0x790 [ 430.728070][ T31] ? __pfx_panic+0x10/0x10 [ 430.732758][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 430.738571][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 430.743949][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 430.750112][ T31] watchdog+0x102d/0x1030 [ 430.754451][ T31] ? watchdog+0x1de/0x1030 [ 430.758878][ T31] kthread+0x711/0x8a0 [ 430.762957][ T31] ? __pfx_watchdog+0x10/0x10 [ 430.767650][ T31] ? __pfx_kthread+0x10/0x10 [ 430.772245][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.777448][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.782649][ T31] ? __pfx_kthread+0x10/0x10 [ 430.787245][ T31] ret_from_fork+0x3fc/0x770 [ 430.791834][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 430.796947][ T31] ? __switch_to_asm+0x39/0x70 [ 430.801712][ T31] ? __switch_to_asm+0x33/0x70 [ 430.806478][ T31] ? __pfx_kthread+0x10/0x10 [ 430.811074][ T31] ret_from_fork_asm+0x1a/0x30 [ 430.815848][ T31] [ 430.819099][ T31] Kernel Offset: disabled [ 430.823419][ T31] Rebooting in 86400 seconds..