./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1040646316 <...> DUID 00:04:f8:32:f0:25:6b:f7:7b:d6:d2:5e:34:7f:1d:07:e3:4e forked to background, child pid 4886 [ 29.402608][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.415483][ T4887] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. execve("./syz-executor1040646316", ["./syz-executor1040646316"], 0x7ffeff9faf60 /* 10 vars */) = 0 brk(NULL) = 0x555563498000 brk(0x555563498d00) = 0x555563498d00 arch_prctl(ARCH_SET_FS, 0x555563498380) = 0 set_tid_address(0x555563498650) = 5217 set_robust_list(0x555563498660, 24) = 0 rseq(0x555563498ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1040646316", 4096) = 28 getrandom("\xd8\xd0\xa1\x8e\x1a\xf5\x82\x15", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563498d00 brk(0x5555634b9d00) = 0x5555634b9d00 brk(0x5555634ba000) = 0x5555634ba000 mprotect(0x7f7d6ff7e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.jWTID0", 0700) = 0 chmod("./syzkaller.jWTID0", 0777) = 0 chdir("./syzkaller.jWTID0") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5218 attached [pid 5218] set_robust_list(0x555563498660, 24 [pid 5217] <... clone resumed>, child_tidptr=0x555563498650) = 5218 [pid 5218] <... set_robust_list resumed>) = 0 [pid 5218] chdir("./0") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5218] write(1, "executing program\n", 18) = 18 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7d67a00000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5218] munmap(0x7f7d67a00000, 138412032) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] close(4) = 0 [pid 5218] mkdir("./file0", 0777) = 0 syzkaller login: [ 53.465927][ T5218] loop0: detected capacity change from 0 to 32768 [ 53.538792][ T5218] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,no_splitbrain_check,norecovery,recovery_pass_last=check_dirents,reconstruct_alloc [ 53.556975][ T5218] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 53.565008][ T5218] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 53.565008][ T5218] running recovery passes: check_allocations [ 53.584819][ T5218] bcachefs (loop0): dropping and reconstructing all alloc info [ 53.600761][ T5218] bcachefs (loop0): accounting_read... done [ 53.606931][ T5218] bcachefs (loop0): alloc_read... done [ 53.612450][ T5218] bcachefs (loop0): stripes_read... done [ 53.618169][ T5218] bcachefs (loop0): snapshots_read... done [ 53.624262][ T5218] bcachefs (loop0): check_allocations... [ 53.626883][ T5218] btree ptr not marked in member info btree allocated bitmap [ 53.626899][ T5218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 53.656211][ T5218] btree ptr not marked in member info btree allocated bitmap [ 53.656222][ T5218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 53.679731][ T5218] btree ptr not marked in member info btree allocated bitmap [ 53.679743][ T5218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 53.702749][ T5218] btree ptr not marked in member info btree allocated bitmap [ 53.702760][ T5218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 53.729225][ T5218] bucket 0:34 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [pid 5218] mount("/dev/loop0", "./file0", "bcachefs", 0, "errors=continue,reconstruct_alloc,shard_inode_numbers,journal_transaction_names,read_only,recovery_p"...) = 0 [pid 5218] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5218] chdir("./file0") = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 53.740100][ T5218] bucket 0:36 gen 0 data type user has wrong fragmentation_lru: got 0, should be 67108864, fixing [ 53.753131][ T5218] done [ 53.757072][ T5218] bcachefs (loop0): going read-write [ 53.767103][ T5218] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 53.779177][ T5218] bcachefs (loop0): done starting filesystem [pid 5218] ioctl(4, LOOP_CLR_FD) = 0 [pid 5218] close(4) = 0 [pid 5218] mount(NULL, "./file0", "tmpfs", 0, NULL) = 0 [pid 5218] exit_group(0) = ? [pid 5218] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 53.875756][ T5218] syz-executor104 (5218) used greatest stack depth: 17936 bytes left getdents64(3, 0x5555634996f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x5555634a1730 /* 3 entries */, 32768) = 80 umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file0", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 getdents64(5, 0x5555634a9770 /* 3 entries */, 32768) = 80 umount2("./0/file0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 54.136152][ T5217] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 54.136170][ T5217] while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e compress incompressible ptr: 0:34:0 gen 0, continuing [ 54.164793][ T5217] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX unlink("./0/file0/file0/file0") = 0 getdents64(5, 0x5555634a9770 /* 1 entries */, 32768) = 32 umount2("./0/file0/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file0/file1", {st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0/file0/file1") = 0 getdents64(5, 0x5555634a9770 /* 0 entries */, 32768) = 0 close(5) = 0 rmdir("./0/file0/file0") = 0 getdents64(4, 0x5555634a1730 /* 1 entries */, 32768) = 32 umount2("./0/file0/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/lost+found", {st_mode=S_IFDIR|0700, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=0, ...}, AT_EMPTY_PATH) = 0 getdents64(5, 0x5555634a9770 /* 2 entries */, 32768) = 48 getdents64(5, 0x5555634a9770 /* 0 entries */, 32768) = 0 close(5) = 0 rmdir("./0/file0/lost+found") = 0 getdents64(4, 0x5555634a1730 /* 1 entries */, 32768) = 32 umount2("./0/file0/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0/file.cold") = 0 getdents64(4, 0x5555634a1730 /* 1 entries */, 32768) = 32 umount2("./0/file0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0/file2") = 0 getdents64(4, 0x5555634a1730 /* 1 entries */, 32768) = 32 umount2("./0/file0/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 54.164810][ T5217] while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e compress incompressible ptr: 0:34:0 gen 0, continuing [ 54.193115][ T5217] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 54.193132][ T5217] while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e compress incompressible ptr: 0:34:0 gen 0, continuing newfstatat(AT_FDCWD, "./0/file0/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0/file3") = 0 getdents64(4, 0x5555634a1730 /* 1 entries */, 32768) = 32 umount2("./0/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/file1", {st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/file0/file1") = 0 getdents64(4, 0x5555634a1730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = -1 EBUSY (Device or resource busy) [ 54.261885][ T5217] bucket 0:36 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 54.261899][ T5217] while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703 compress lz4 ptr: 0:36:0 gen 0, continuing [ 54.300525][ T5217] bcachefs (loop0): shutting down [ 54.305751][ T5217] bcachefs (loop0): going read-only [ 54.311037][ T5217] bcachefs (loop0): finished waiting for writes to stop [ 54.320239][ T5217] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 76.636029][ T46] cfg80211: failed to load regulatory.db [ 286.556737][ T30] INFO: task bch-reclaim/loo:5227 blocked for more than 143 seconds. [ 286.565185][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 286.572474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.582094][ T30] task:bch-reclaim/loo state:D stack:26552 pid:5227 tgid:5227 ppid:2 flags:0x00004000 [ 286.592609][ T30] Call Trace: [ 286.596119][ T30] [ 286.599064][ T30] __schedule+0x1843/0x4ae0 [ 286.603621][ T30] ? __pfx___schedule+0x10/0x10 [ 286.609109][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.614395][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 286.619887][ T30] ? schedule+0x90/0x320 [ 286.624506][ T30] schedule+0x14b/0x320 [ 286.628687][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.634504][ T30] __mutex_lock+0x6a7/0xd70 [ 286.639030][ T30] ? __mutex_lock+0x52a/0xd70 [ 286.643719][ T30] ? bch2_journal_reclaim_thread+0x167/0x560 [ 286.650178][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.655499][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.660725][ T30] bch2_journal_reclaim_thread+0x167/0x560 [ 286.666890][ T30] ? bch2_journal_reclaim_thread+0x249/0x560 [ 286.672909][ T30] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 286.679712][ T30] kthread+0x2f0/0x390 [ 286.683816][ T30] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 286.691069][ T30] ? __pfx_kthread+0x10/0x10 [ 286.695913][ T30] ret_from_fork+0x4b/0x80 [ 286.700351][ T30] ? __pfx_kthread+0x10/0x10 [ 286.705297][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.710095][ T30] [ 286.713125][ T30] [ 286.713125][ T30] Showing all locks held in the system: [ 286.721489][ T30] 1 lock held by khungtaskd/30: [ 286.726580][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 286.736807][ T30] 2 locks held by getty/4974: [ 286.741493][ T30] #0: ffff88814bd950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.751721][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 286.762146][ T30] 5 locks held by syz-executor104/5217: [ 286.767906][ T30] 1 lock held by bch-reclaim/loo/5227: [ 286.773369][ T30] #0: ffff8880773cb0a8 (&j->reclaim_lock){+.+.}-{3:3}, at: bch2_journal_reclaim_thread+0x167/0x560 [ 286.784515][ T30] [ 286.786851][ T30] ============================================= [ 286.786851][ T30] [ 286.795941][ T30] NMI backtrace for cpu 0 [ 286.800286][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 286.810444][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.820501][ T30] Call Trace: [ 286.823782][ T30] [ 286.826716][ T30] dump_stack_lvl+0x241/0x360 [ 286.831403][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.836604][ T30] ? __pfx__printk+0x10/0x10 [ 286.841215][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 286.846179][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.851642][ T30] ? _printk+0xd5/0x120 [ 286.855806][ T30] ? __pfx__printk+0x10/0x10 [ 286.860405][ T30] ? __wake_up_klogd+0xcc/0x110 [ 286.865268][ T30] ? __pfx__printk+0x10/0x10 [ 286.869870][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 286.874907][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.880898][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 286.886890][ T30] watchdog+0xff4/0x1040 [ 286.891142][ T30] ? watchdog+0x1ea/0x1040 [ 286.895576][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.900258][ T30] kthread+0x2f0/0x390 [ 286.904335][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.909018][ T30] ? __pfx_kthread+0x10/0x10 [ 286.913616][ T30] ret_from_fork+0x4b/0x80 [ 286.918044][ T30] ? __pfx_kthread+0x10/0x10 [ 286.922640][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.927428][ T30] [ 286.930545][ T30] Sending NMI from CPU 0 to CPUs 1: [ 286.935797][ C1] NMI backtrace for cpu 1 [ 286.935808][ C1] CPU: 1 UID: 0 PID: 5217 Comm: syz-executor104 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 286.935826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.935835][ C1] RIP: 0010:bch2_trans_unlock+0x41/0x470 [ 286.935855][ C1] Code: 00 00 00 00 00 fc ff df e8 bc 97 7a fd 49 8d 5f 3a 48 89 dd 48 c1 ed 03 42 0f b6 44 35 00 84 c0 0f 85 bb 03 00 00 44 0f b7 23 01 00 00 00 44 89 e6 e8 32 9b 7a fd 41 83 fc 01 0f 86 90 02 00 [ 286.935872][ C1] RSP: 0018:ffffc90002f5f338 EFLAGS: 00000246 [ 286.935886][ C1] RAX: 0000000000000000 RBX: ffff88807e07003a RCX: ffff8880772f5a00 [ 286.935897][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: ffff88807e070000 [ 286.935907][ C1] RBP: 1ffff1100fc0e007 R08: ffffffff842029da R09: 1ffff920005ebe64 [ 286.935918][ C1] R10: dffffc0000000000 R11: fffff520005ebe65 R12: 0000000000000040 [ 286.935929][ C1] R13: ffffc90002f5f550 R14: dffffc0000000000 R15: ffff88807e070000 [ 286.935941][ C1] FS: 0000555563498380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 286.935954][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.935965][ C1] CR2: 00007ffd670dbd0c CR3: 0000000029568000 CR4: 00000000003506f0 [ 286.935978][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.935987][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.935996][ C1] Call Trace: [ 286.936003][ C1] [ 286.936009][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 286.936026][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 286.936047][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.936062][ C1] ? nmi_handle+0x2a/0x5a0 [ 286.936083][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 286.936100][ C1] ? nmi_handle+0x14f/0x5a0 [ 286.936113][ C1] ? nmi_handle+0x2a/0x5a0 [ 286.936128][ C1] ? bch2_trans_unlock+0x41/0x470 [ 286.936142][ C1] ? default_do_nmi+0x63/0x160 [ 286.936159][ C1] ? exc_nmi+0x123/0x1f0 [ 286.936175][ C1] ? end_repeat_nmi+0xf/0x53 [ 286.936197][ C1] ? btree_write_buffer_flush_seq+0x1b0a/0x1bc0 [ 286.936215][ C1] ? bch2_trans_unlock+0x41/0x470 [ 286.936230][ C1] ? bch2_trans_unlock+0x41/0x470 [ 286.936246][ C1] ? bch2_trans_unlock+0x41/0x470 [ 286.936261][ C1] [ 286.936266][ C1] [ 286.936275][ C1] btree_write_buffer_flush_seq+0x17a/0x1bc0 [ 286.936300][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 286.936318][ C1] ? __asan_memset+0x23/0x50 [ 286.936334][ C1] ? lockdep_init_map_type+0xa1/0x910 [ 286.936352][ C1] ? __pfx_btree_write_buffer_flush_seq+0x10/0x10 [ 286.936369][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 286.936389][ C1] ? journal_flush_pins+0x597/0xb20 [ 286.936405][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 286.936430][ C1] ? __bch2_trans_get+0x975/0xd20 [ 286.936450][ C1] bch2_btree_write_buffer_journal_flush+0x4e/0x80 [ 286.936467][ C1] ? __pfx_bch2_btree_write_buffer_journal_flush+0x10/0x10 [ 286.936485][ C1] journal_flush_pins+0x5f7/0xb20 [ 286.936512][ C1] journal_flush_done+0x8e/0x260 [ 286.936530][ C1] bch2_journal_flush_pins+0x102/0x3a0 [ 286.936548][ C1] ? __pfx_bch2_journal_flush_pins+0x10/0x10 [ 286.936565][ C1] ? __bch2_print+0x17a/0x220 [ 286.936580][ C1] ? __pfx_bch2_btree_interior_updates_flush+0x10/0x10 [ 286.936597][ C1] ? __pfx___bch2_print+0x10/0x10 [ 286.936612][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.936627][ C1] ? kthread_stop+0x2c2/0x640 [ 286.936648][ C1] ? bch2_copygc_stop+0x103/0x150 [ 286.936663][ C1] __bch2_fs_read_only+0x124/0x430 [ 286.936681][ C1] bch2_fs_read_only+0xb57/0x1200 [ 286.936703][ C1] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 286.936718][ C1] ? __bch2_print+0x17a/0x220 [ 286.936735][ C1] ? down_write+0x18c/0x220 [ 286.936749][ C1] ? __pfx_down_write+0x10/0x10 [ 286.936764][ C1] ? hook_sb_delete+0xaa0/0xbd0 [ 286.936784][ C1] __bch2_fs_stop+0x105/0x540 [ 286.936801][ C1] ? __pfx___bch2_fs_stop+0x10/0x10 [ 286.936817][ C1] ? __pfx_evict_inodes+0x10/0x10 [ 286.936836][ C1] ? bch2_sync_fs+0x155/0x300 [ 286.936855][ C1] ? __pfx_bch2_put_super+0x10/0x10 [ 286.936872][ C1] generic_shutdown_super+0x139/0x2d0 [ 286.936890][ C1] bch2_kill_sb+0x41/0x50 [ 286.936906][ C1] deactivate_locked_super+0xc4/0x130 [ 286.936922][ C1] cleanup_mnt+0x41f/0x4b0 [ 286.936942][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 286.936962][ C1] task_work_run+0x24f/0x310 [ 286.936979][ C1] ? __pfx_task_work_run+0x10/0x10 [ 286.936993][ C1] ? path_umount+0x284/0xf70 [ 286.937012][ C1] ptrace_notify+0x2d2/0x380 [ 286.937028][ C1] ? __pfx_path_umount+0x10/0x10 [ 286.937044][ C1] ? __pfx_ptrace_notify+0x10/0x10 [ 286.937062][ C1] ? __x64_sys_umount+0x123/0x170 [ 286.937078][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 286.937095][ C1] syscall_exit_work+0xc6/0x190 [ 286.937115][ C1] syscall_exit_to_user_mode+0x279/0x370 [ 286.937136][ C1] do_syscall_64+0x100/0x230 [ 286.937150][ C1] ? clear_bhb_loop+0x35/0x90 [ 286.937169][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.937188][ C1] RIP: 0033:0x7f7d6ff06587 [ 286.937259][ C1] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 286.937271][ C1] RSP: 002b:00007ffeb085b6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 286.937286][ C1] RAX: 0000000000000000 RBX: 0000555563498338 RCX: 00007f7d6ff06587 [ 286.937296][ C1] RDX: 00000000000108d0 RSI: 0000000000000009 RDI: 00007ffeb085c870 [ 286.937306][ C1] RBP: 0000000000000064 R08: 0000000000000000 R09: 0000000000000000 [ 286.937315][ C1] R10: 0000000000000100 R11: 0000000000000246 R12: 00007ffeb085c870 [ 286.937325][ C1] R13: 00005555634a1700 R14: 431bde82d7b634db R15: 00007ffeb085d900 [ 286.937342][ C1] [ 286.937349][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.552 msecs [ 287.522883][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.529758][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 287.539913][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.549967][ T30] Call Trace: [ 287.553249][ T30] [ 287.556180][ T30] dump_stack_lvl+0x241/0x360 [ 287.560864][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.566064][ T30] ? __pfx__printk+0x10/0x10 [ 287.570669][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.576663][ T30] ? vscnprintf+0x5d/0x90 [ 287.580997][ T30] panic+0x349/0x880 [ 287.584908][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.591067][ T30] ? __pfx_panic+0x10/0x10 [ 287.595492][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 287.600866][ T30] ? __irq_work_queue_local+0x137/0x410 [ 287.606420][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.611794][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 287.617954][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 287.624116][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 287.630283][ T30] watchdog+0x1033/0x1040 [ 287.634625][ T30] ? watchdog+0x1ea/0x1040 [ 287.639055][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.643737][ T30] kthread+0x2f0/0x390 [ 287.647805][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.652487][ T30] ? __pfx_kthread+0x10/0x10 [ 287.657079][ T30] ret_from_fork+0x4b/0x80 [ 287.661505][ T30] ? __pfx_kthread+0x10/0x10 [ 287.666103][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.670890][ T30] [ 287.674134][ T30] Kernel Offset: disabled [ 287.678445][ T30] Rebooting in 86400 seconds..