./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1163110561 <...> Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. execve("./syz-executor1163110561", ["./syz-executor1163110561"], 0x7ffe942b94a0 /* 10 vars */) = 0 brk(NULL) = 0x555561db5000 brk(0x555561db5d00) = 0x555561db5d00 arch_prctl(ARCH_SET_FS, 0x555561db5380) = 0 set_tid_address(0x555561db5650) = 5828 set_robust_list(0x555561db5660, 24) = 0 rseq(0x555561db5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1163110561", 4096) = 28 getrandom("\x22\x7c\xc6\x87\x09\x7c\x6e\xf1", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561db5d00 brk(0x555561dd6d00) = 0x555561dd6d00 brk(0x555561dd7000) = 0x555561dd7000 mprotect(0x7f611e04f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached , child_tidptr=0x555561db5650) = 5829 [pid 5829] set_robust_list(0x555561db5660, 24) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] setpgid(0, 0) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1000", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] write(1, "executing program\n", 18executing program ) = 18 [pid 5829] memfd_create("syzkaller", 0) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6115a00000 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5829] munmap(0x7f6115a00000, 138412032) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5829] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5829] close(3) = 0 [pid 5829] close(4) = 0 [pid 5829] mkdir("./file1", 0777) = 0 [ 91.868969][ T3083] cfg80211: failed to load regulatory.db [ 91.897292][ T5829] loop0: detected capacity change from 0 to 32768 [ 91.922944][ T5829] ======================================================= [ 91.922944][ T5829] WARNING: The mand mount option has been deprecated and [ 91.922944][ T5829] and is ignored by this kernel. Remove the mand [ 91.922944][ T5829] option from the mount to silence this warning. [ 91.922944][ T5829] ======================================================= [ 92.002087][ T5829] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 92.002087][ T5829] allowing incompatible features above 0.0: (unknown version) [ 92.002087][ T5829] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 92.038878][ T5829] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 92.047479][ T5829] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 92.055634][ T5829] bcachefs (loop0): Version upgrade required: [ 92.055634][ T5829] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 92.055634][ T5829] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 92.055634][ T5829] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 92.146802][ T5829] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 92.146828][ T5829] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc70000 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 92.146845][ T5829] loop0 node offset 0/24: got wrong btree node: got [ 92.146857][ T5829] btree=alloc level=0 seq ac62141f8dc7e261 1 [ 92.146868][ T5829] min: POS_MIN [ 92.146877][ T5829] max: SPOS_MAX [ 92.146894][ T5829] flagging btree alloc lost data [ 92.146904][ T5829] ret btree_node_read_validate_error [ 92.200570][ T5829] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 92.217564][ T5829] bcachefs (loop0): check_topology... done [ 92.224537][ T5829] bcachefs (loop0): accounting_read... done [ 92.232598][ T5829] bcachefs (loop0): alloc_read... done [ 92.239386][ T5829] bcachefs (loop0): snapshots_read... done [ 92.246415][ T5829] bcachefs (loop0): check_allocations... [ 92.248883][ T5829] bcachefs (loop0): bucket 0:34 data type cached ptr gen 1 missing in alloc btree [ 92.248902][ T5829] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 0 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 1 cached, fixing [ 92.283598][ T5829] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 92.283616][ T5829] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, fixing [ 92.310978][ T5829] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 92.310995][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 92.338347][ T5829] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 92.338362][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 92.364941][ T5829] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 92.364958][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 92.390447][ T5829] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 92.390464][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 92.416937][ T5829] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 92.416955][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 92.443401][ T5829] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 92.443417][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 92.468552][ T5829] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 92.468568][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 92.495307][ T5829] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 92.495325][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 92.521206][ T5829] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 92.521222][ T5829] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 92.521235][ T5829] Ratelimiting new instances of previous error [ 92.560096][ T5829] done [ 92.565574][ T5829] bcachefs (loop0): going read-write [ 92.594159][ T5839] ODEBUG: object ffffc9000446fb90 is on stack ffffc90004468000, but NOT annotated. [ 92.594526][ T5839] [ 92.594535][ T5839] ====================================================== [ 92.594543][ T5839] WARNING: possible circular locking dependency detected [ 92.594563][ T5839] 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 Not tainted [ 92.594574][ T5839] ------------------------------------------------------ [ 92.594582][ T5839] bch-copygc/loop/5839 is trying to acquire lock: [ 92.594592][ T5839] ffffffff8e132fc0 (console_owner){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 92.594641][ T5839] [ 92.594641][ T5839] but task is already holding lock: [ 92.594647][ T5839] ffffffff99cb72f8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 92.594679][ T5839] [ 92.594679][ T5839] which lock already depends on the new lock. [ 92.594679][ T5839] [ 92.594684][ T5839] [ 92.594684][ T5839] the existing dependency chain (in reverse order) is: [ 92.594689][ T5839] [ 92.594689][ T5839] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 92.594707][ T5839] lock_acquire+0x120/0x360 [ 92.594724][ T5839] _raw_spin_lock_irqsave+0xa7/0xf0 [ 92.594747][ T5839] debug_object_activate+0xbb/0x420 [ 92.594762][ T5839] insert_work+0x35/0x330 [ 92.594779][ T5839] __queue_work+0xcfc/0xfe0 [ 92.594801][ T5839] queue_work_on+0x181/0x270 [ 92.594821][ T5839] start_poll_synchronize_rcu_expedited+0xfc/0x140 [ 92.594837][ T5839] rcu_init+0x108/0x160 [ 92.594850][ T5839] start_kernel+0x1fb/0x500 [ 92.594867][ T5839] x86_64_start_reservations+0x24/0x30 [ 92.594881][ T5839] x86_64_start_kernel+0x143/0x1c0 [ 92.594893][ T5839] common_startup_64+0x13e/0x147 [ 92.594907][ T5839] [ 92.594907][ T5839] -> #3 (&pool->lock){-.-.}-{2:2}: [ 92.594925][ T5839] lock_acquire+0x120/0x360 [ 92.594942][ T5839] _raw_spin_lock+0x2e/0x40 [ 92.594959][ T5839] __queue_work+0x7b0/0xfe0 [ 92.594978][ T5839] queue_work_on+0x181/0x270 [ 92.594998][ T5839] rpm_suspend+0xe54/0x1720 [ 92.595011][ T5839] __pm_runtime_idle+0x12f/0x1a0 [ 92.595023][ T5839] __device_attach+0x342/0x400 [ 92.595045][ T5839] bus_probe_device+0x185/0x260 [ 92.595064][ T5839] device_add+0x7b6/0xb50 [ 92.595076][ T5839] serial_base_port_add+0x2f2/0x430 [ 92.595093][ T5839] serial_core_register_port+0x367/0x2700 [ 92.595115][ T5839] serial8250_register_8250_port+0x16db/0x2050 [ 92.595135][ T5839] serial_pnp_probe+0x527/0x790 [ 92.595155][ T5839] pnp_device_probe+0x30b/0x4c0 [ 92.595177][ T5839] really_probe+0x26a/0x9a0 [ 92.595193][ T5839] __driver_probe_device+0x18c/0x2f0 [ 92.595207][ T5839] driver_probe_device+0x4f/0x430 [ 92.595222][ T5839] __driver_attach+0x452/0x700 [ 92.595237][ T5839] bus_for_each_dev+0x230/0x2b0 [ 92.595256][ T5839] bus_add_driver+0x345/0x640 [ 92.595275][ T5839] driver_register+0x23a/0x320 [ 92.595292][ T5839] serial8250_init+0xc2/0x1c0 [ 92.595312][ T5839] do_one_initcall+0x233/0x820 [ 92.595324][ T5839] do_initcall_level+0x137/0x1f0 [ 92.595342][ T5839] do_initcalls+0x69/0xd0 [ 92.595360][ T5839] kernel_init_freeable+0x3d9/0x570 [ 92.595379][ T5839] kernel_init+0x1d/0x1d0 [ 92.595393][ T5839] ret_from_fork+0x3fc/0x770 [ 92.595411][ T5839] ret_from_fork_asm+0x1a/0x30 [ 92.595423][ T5839] [ 92.595423][ T5839] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 92.595442][ T5839] lock_acquire+0x120/0x360 [ 92.595458][ T5839] _raw_spin_lock_irqsave+0xa7/0xf0 [ 92.595476][ T5839] __pm_runtime_resume+0x10f/0x180 [ 92.595489][ T5839] __uart_start+0x171/0x440 [ 92.595509][ T5839] uart_write+0xdc/0x130 [ 92.595520][ T5839] n_tty_write+0xd35/0x11d0 [ 92.595536][ T5839] file_tty_write+0x500/0x990 [ 92.595556][ T5839] vfs_write+0x54b/0xa90 [ 92.595570][ T5839] ksys_write+0x145/0x250 [ 92.595584][ T5839] do_syscall_64+0xfa/0x3b0 [ 92.595595][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.595608][ T5839] [ 92.595608][ T5839] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 92.595626][ T5839] lock_acquire+0x120/0x360 [ 92.595643][ T5839] _raw_spin_lock_irqsave+0xa7/0xf0 [ 92.595660][ T5839] serial8250_console_write+0x17e/0x1ba0 [ 92.595674][ T5839] console_flush_all+0x728/0xc40 [ 92.595687][ T5839] console_unlock+0xc4/0x270 [ 92.595707][ T5839] vprintk_emit+0x5b7/0x7a0 [ 92.595727][ T5839] _printk+0xcf/0x120 [ 92.595739][ T5839] register_console+0xa8b/0xf90 [ 92.595752][ T5839] univ8250_console_init+0x52/0x90 [ 92.595772][ T5839] console_init+0x1a1/0x670 [ 92.595794][ T5839] start_kernel+0x2cc/0x500 [ 92.595811][ T5839] x86_64_start_reservations+0x24/0x30 [ 92.595824][ T5839] x86_64_start_kernel+0x143/0x1c0 [ 92.595836][ T5839] common_startup_64+0x13e/0x147 [ 92.595849][ T5839] [ 92.595849][ T5839] -> #0 (console_owner){....}-{0:0}: [ 92.595868][ T5839] validate_chain+0xb9b/0x2140 [ 92.595888][ T5839] __lock_acquire+0xab9/0xd20 [ 92.595904][ T5839] lock_acquire+0x120/0x360 [ 92.595921][ T5839] console_flush_all+0x6d2/0xc40 [ 92.595933][ T5839] console_unlock+0xc4/0x270 [ 92.595953][ T5839] vprintk_emit+0x5b7/0x7a0 [ 92.595974][ T5839] _printk+0xcf/0x120 [ 92.595985][ T5839] __debug_object_init+0x2c8/0x3c0 [ 92.595999][ T5839] rhashtable_init_noprof+0x7c0/0xbb0 [ 92.596020][ T5839] bch2_copygc_thread+0x116/0xdc0 [ 92.596039][ T5839] kthread+0x70e/0x8a0 [ 92.596051][ T5839] ret_from_fork+0x3fc/0x770 [ 92.596068][ T5839] ret_from_fork_asm+0x1a/0x30 [ 92.596081][ T5839] [ 92.596081][ T5839] other info that might help us debug this: [ 92.596081][ T5839] [ 92.596085][ T5839] Chain exists of: [ 92.596085][ T5839] console_owner --> &pool->lock --> &obj_hash[i].lock [ 92.596085][ T5839] [ 92.596107][ T5839] Possible unsafe locking scenario: [ 92.596107][ T5839] [ 92.596112][ T5839] CPU0 CPU1 [ 92.596116][ T5839] ---- ---- [ 92.596120][ T5839] lock(&obj_hash[i].lock); [ 92.596129][ T5839] lock(&pool->lock); [ 92.596139][ T5839] lock(&obj_hash[i].lock); [ 92.596150][ T5839] lock(console_owner); [ 92.596159][ T5839] [ 92.596159][ T5839] *** DEADLOCK *** [ 92.596159][ T5839] [ 92.596167][ T5839] 3 locks held by bch-copygc/loop/5839: [ 92.596175][ T5839] #0: ffffffff99cb72f8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 92.596209][ T5839] #1: ffffffff8e133020 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 92.596240][ T5839] #2: ffffffff8e01a8f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 92.596273][ T5839] [ 92.596273][ T5839] stack backtrace: [ 92.596285][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 92.596303][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.596315][ T5839] Call Trace: [ 92.596323][ T5839] [ 92.596330][ T5839] dump_stack_lvl+0x189/0x250 [ 92.596353][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.596375][ T5839] ? __pfx__printk+0x10/0x10 [ 92.596389][ T5839] ? print_lock_name+0xde/0x100 [ 92.596413][ T5839] print_circular_bug+0x2ee/0x310 [ 92.596437][ T5839] check_noncircular+0x134/0x160 [ 92.596462][ T5839] validate_chain+0xb9b/0x2140 [ 92.596492][ T5839] __lock_acquire+0xab9/0xd20 [ 92.596512][ T5839] ? console_flush_all+0x13a/0xc40 [ 92.596526][ T5839] lock_acquire+0x120/0x360 [ 92.596543][ T5839] ? console_flush_all+0x13a/0xc40 [ 92.596560][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 92.596575][ T5839] ? console_flush_all+0x13a/0xc40 [ 92.596589][ T5839] console_flush_all+0x6d2/0xc40 [ 92.596603][ T5839] ? console_flush_all+0x13a/0xc40 [ 92.596617][ T5839] ? console_flush_all+0x13a/0xc40 [ 92.596634][ T5839] ? __pfx_console_flush_all+0x10/0x10 [ 92.596651][ T5839] ? is_printk_cpu_sync_owner+0x32/0x40 [ 92.596670][ T5839] console_unlock+0xc4/0x270 [ 92.596692][ T5839] ? __pfx_console_unlock+0x10/0x10 [ 92.596720][ T5839] ? is_printk_cpu_sync_owner+0x32/0x40 [ 92.596738][ T5839] vprintk_emit+0x5b7/0x7a0 [ 92.596761][ T5839] ? __pfx_vprintk_emit+0x10/0x10 [ 92.596784][ T5839] ? __lock_acquire+0xab9/0xd20 [ 92.596806][ T5839] ? do_raw_spin_lock+0x121/0x290 [ 92.596823][ T5839] _printk+0xcf/0x120 [ 92.596838][ T5839] ? __pfx__printk+0x10/0x10 [ 92.596855][ T5839] __debug_object_init+0x2c8/0x3c0 [ 92.596871][ T5839] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 92.596895][ T5839] rhashtable_init_noprof+0x7c0/0xbb0 [ 92.596919][ T5839] bch2_copygc_thread+0x116/0xdc0 [ 92.596942][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 92.596973][ T5839] ? finish_task_switch+0x266/0x950 [ 92.596991][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.597018][ T5839] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 92.597058][ T5839] ? __kthread_parkme+0x7b/0x200 [ 92.597080][ T5839] ? __kthread_parkme+0x1a1/0x200 [ 92.597104][ T5839] kthread+0x70e/0x8a0 [ 92.597119][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 92.597135][ T5839] ? __pfx_kthread+0x10/0x10 [ 92.597149][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.597170][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.597191][ T5839] ? __pfx_kthread+0x10/0x10 [ 92.597205][ T5839] ret_from_fork+0x3fc/0x770 [ 92.597224][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 92.597244][ T5839] ? __switch_to_asm+0x39/0x70 [ 92.597257][ T5839] ? __switch_to_asm+0x33/0x70 [ 92.597269][ T5839] ? __pfx_kthread+0x10/0x10 [ 92.597283][ T5839] ret_from_fork_asm+0x1a/0x30 [ 92.597302][ T5839] [ 92.604677][ T5829] bcachefs (loop0): journal_replay... [ 92.607456][ T5839] ------------[ cut here ]------------ [ 92.609646][ T3083] bcachefs (loop0): going read-only [ 92.615968][ T5839] WARNING: CPU: 0 PID: 5839 at lib/debugobjects.c:655 __debug_object_init+0x2c9/0x3c0 [ 92.616009][ T5839] Modules linked in: [ 93.558612][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 93.558636][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.558647][ T5839] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 93.558673][ T5839] Code: cc cc cc 41 ff c7 44 89 3d f4 2b 17 15 48 c7 c1 00 b8 e1 8b 48 c7 c7 60 b8 e1 8b 84 c0 48 0f 45 f9 48 89 de e8 28 3c 67 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 0c 67 cb 09 3b 05 0a [ 93.558693][ T5839] RSP: 0018:ffffc9000446f6e0 EFLAGS: 00010046 [ 93.558708][ T5839] RAX: 0000000000000050 RBX: ffffc9000446fb90 RCX: b5c7250fe6aa5600 [ 93.558721][ T5839] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 93.558733][ T5839] RBP: ffff88802f6a1e20 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 93.558747][ T5839] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 93.558759][ T5839] R13: ffff8880318df038 R14: dffffc0000000000 R15: 0000000000000001 [ 93.558772][ T5839] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 93.558786][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.558798][ T5839] CR2: 00007ff72d564000 CR3: 0000000076830000 CR4: 00000000003526f0 [ 93.558813][ T5839] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.558823][ T5839] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.558834][ T5839] Call Trace: [ 93.558843][ T5839] [ 93.558853][ T5839] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 93.558884][ T5839] rhashtable_init_noprof+0x7c0/0xbb0 [ 93.558913][ T5839] bch2_copygc_thread+0x116/0xdc0 [ 93.558942][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.558984][ T5839] ? finish_task_switch+0x266/0x950 [ 93.559006][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.559039][ T5839] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 93.559080][ T5839] ? __kthread_parkme+0x7b/0x200 [ 93.559106][ T5839] ? __kthread_parkme+0x1a1/0x200 [ 93.559135][ T5839] kthread+0x70e/0x8a0 [ 93.559154][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.559173][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.559191][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.559214][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.559238][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.559256][ T5839] ret_from_fork+0x3fc/0x770 [ 93.559281][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 93.559306][ T5839] ? __switch_to_asm+0x39/0x70 [ 93.559322][ T5839] ? __switch_to_asm+0x33/0x70 [ 93.559337][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.559355][ T5839] ret_from_fork_asm+0x1a/0x30 [ 93.559378][ T5839] [ 93.559387][ T5839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.559398][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 93.559418][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.559428][ T5839] Call Trace: [ 93.559435][ T5839] [ 93.559442][ T5839] dump_stack_lvl+0x99/0x250 [ 93.559468][ T5839] ? __asan_memcpy+0x40/0x70 [ 93.559485][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.559510][ T5839] ? __pfx__printk+0x10/0x10 [ 93.559531][ T5839] panic+0x2db/0x790 [ 93.559558][ T5839] ? __pfx_panic+0x10/0x10 [ 93.559581][ T5839] ? show_trace_log_lvl+0x4fb/0x550 [ 93.559609][ T5839] ? ret_from_fork_asm+0x1a/0x30 [ 93.559627][ T5839] __warn+0x31b/0x4b0 [ 93.559651][ T5839] ? __debug_object_init+0x2c9/0x3c0 [ 93.559670][ T5839] ? __debug_object_init+0x2c9/0x3c0 [ 93.559688][ T5839] report_bug+0x2be/0x4f0 [ 93.559713][ T5839] ? __debug_object_init+0x2c9/0x3c0 [ 93.559732][ T5839] ? __debug_object_init+0x2c9/0x3c0 [ 93.559751][ T5839] ? __debug_object_init+0x2cb/0x3c0 [ 93.559769][ T5839] handle_bug+0x84/0x160 [ 93.559787][ T5839] exc_invalid_op+0x1a/0x50 [ 93.559804][ T5839] asm_exc_invalid_op+0x1a/0x20 [ 93.559821][ T5839] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 93.559840][ T5839] Code: cc cc cc 41 ff c7 44 89 3d f4 2b 17 15 48 c7 c1 00 b8 e1 8b 48 c7 c7 60 b8 e1 8b 84 c0 48 0f 45 f9 48 89 de e8 28 3c 67 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 0c 67 cb 09 3b 05 0a [ 93.559854][ T5839] RSP: 0018:ffffc9000446f6e0 EFLAGS: 00010046 [ 93.559869][ T5839] RAX: 0000000000000050 RBX: ffffc9000446fb90 RCX: b5c7250fe6aa5600 [ 93.559882][ T5839] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 93.559892][ T5839] RBP: ffff88802f6a1e20 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 93.559906][ T5839] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 93.559918][ T5839] R13: ffff8880318df038 R14: dffffc0000000000 R15: 0000000000000001 [ 93.559939][ T5839] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 93.559967][ T5839] rhashtable_init_noprof+0x7c0/0xbb0 [ 93.560009][ T5839] bch2_copygc_thread+0x116/0xdc0 [ 93.560036][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.560073][ T5839] ? finish_task_switch+0x266/0x950 [ 93.560093][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.560125][ T5839] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 93.560166][ T5839] ? __kthread_parkme+0x7b/0x200 [ 93.560192][ T5839] ? __kthread_parkme+0x1a1/0x200 [ 93.560221][ T5839] kthread+0x70e/0x8a0 [ 93.560239][ T5839] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 93.560258][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.560276][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.560299][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.560324][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.560342][ T5839] ret_from_fork+0x3fc/0x770 [ 93.560365][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 93.560390][ T5839] ? __switch_to_asm+0x39/0x70 [ 93.560406][ T5839] ? __switch_to_asm+0x33/0x70 [ 93.560421][ T5839] ? __pfx_kthread+0x10/0x10 [ 93.560439][ T5839] ret_from_fork_asm+0x1a/0x30 [ 93.560461][ T5839] [ 93.560802][ T5839] Kernel Offset: disabled