BUG: MAX_LOCK_DEPTH too low! turning off the locking correctness validator. depth: 48 max: 48! 48 locks held by syz.2.159/7702: #0: ffff0000f35ba420 (sb_writers#20){.+.+}-{0:0}, at: do_ftruncate+0x1e4/0x4cc fs/open.c:178 #1: ffff0000ef21d2c8 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:791 [inline] #1: ffff0000ef21d2c8 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: do_truncate fs/open.c:63 [inline] #1: ffff0000ef21d2c8 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: do_ftruncate+0x3d0/0x4cc fs/open.c:181 #2: ffff0000e5000ab8 (&c->snapshot_create_lock){.+.+}-{3:3}, at: bch2_truncate+0x134/0x274 fs/bcachefs/io_misc.c:290 #3: ffff0000e50042d8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 include/linux/srcu.h:115 #4: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #5: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #5: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #6: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #6: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #7: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #7: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #8: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #8: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #9: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #9: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #10: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #10: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #11: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #11: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #12: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: btree_node_lock_increment fs/bcachefs/btree_locking.h:248 [inline] #12: ffff0000ec43f870 (&dev->mutex){....}-{3:3}, at: __bch2_btree_node_relock+0x6a0/0xa94 fs/bcachefs/btree_locking.c:509 #13: ffff0000dd5909d8 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #14: ffff0000dd590b30 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #15: ffff0000dd590c88 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #16: ffff0000dd590de0 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #17: ffff0000dd590f38 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #18: ffff0000ef2e8b30 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #19: ffff0000ef2e89d8 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #20: ffff0000ef2e8478 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #21: ffff0000c7e73870 (&dev->mutex){....}-{3:3}, at: six_relock_type+0x24/0x5c fs/bcachefs/six.h:288 #22: ffff0000f0e78870 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #23: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #24: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #25: ffff0000dd590880 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #26: ffff0000c7e73070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #27: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #28: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #29: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #30: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #31: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: btree_node_lock_nopath_nofail+0x28/0x164 fs/bcachefs/btree_locking.h:227 #32: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: btree_split+0x1618/0x4c84 fs/bcachefs/btree_update_interior.c:1674 #33: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: bch2_trans_node_add+0xbb8/0x12d4 fs/bcachefs/btree_iter.c:699 #34: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: bch2_trans_node_add+0xbb8/0x12d4 fs/bcachefs/btree_iter.c:699 #35: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: bch2_trans_node_add+0xbb8/0x12d4 fs/bcachefs/btree_iter.c:699 #36: ffff0000f0e7e070 (&dev->mutex){....}-{3:3}, at: bch2_trans_node_add+0xbb8/0x12d4 fs/bcachefs/btree_iter.c:699 #37: ffff0000e5026750 (&c->gc_lock){.+.+}-{3:3}, at: bch2_btree_update_start+0x590/0x15a0 fs/bcachefs/btree_update_interior.c:1195 #38: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #39: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #40: ffff0000dd5915f0 (&dev->mutex){....}-{3:3}, at: six_trylock_intent+0x18/0x48 fs/bcachefs/six.h:366 #41: ffff0000e501dc78 (&wp->lock){+.+.}-{3:3}, at: bch2_trans_mutex_lock_norelock fs/bcachefs/alloc_foreground.c:41 [inline] #41: ffff0000e501dc78 (&wp->lock){+.+.}-{3:3}, at: writepoint_find fs/bcachefs/alloc_foreground.c:1302 [inline] #41: ffff0000e501dc78 (&wp->lock){+.+.}-{3:3}, at: bch2_alloc_sectors_start_trans+0x290/0x1958 fs/bcachefs/alloc_foreground.c:1410 #42: ffff0000f0e7b070 (&dev->mutex){....}-{3:3}, at: six_trylock_type+0x1c/0x4c fs/bcachefs/six.h:206 #43: ffff800080017c60 (&(&bat_priv->nc.work)->timer){..-.}-{0:0}, at: lockdep_copy_map include/linux/lockdep.h:41 [inline] #43: ffff800080017c60 (&(&bat_priv->nc.work)->timer){..-.}-{0:0}, at: call_timer_fn+0xd0/0x8e8 kernel/time/timer.c:1782 #44: ffff80008f4b7be0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c include/linux/rcupdate.h:328 #45: ffff0000c1088018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x854/0x12ac #46: ffff0000d3a9e478 (&p->pi_lock){-.-.}-{2:2}, at: class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:553 [inline] #46: ffff0000d3a9e478 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb0/0xf2c kernel/sched/core.c:4262 #47: ffff80008f4b7be0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:328 INFO: lockdep is turned off. CPU: 1 PID: 7702 Comm: syz.2.159 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:317 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:324 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:114 dump_stack+0x1c/0x28 lib/dump_stack.c:123 __lock_acquire+0x1d5c/0x763c kernel/locking/lockdep.c:5159 lock_acquire+0x240/0x728 kernel/locking/lockdep.c:5754 rcu_lock_acquire+0x38/0x44 include/linux/rcupdate.h:329 rcu_read_lock include/linux/rcupdate.h:781 [inline] select_task_rq_fair+0x3d4/0x3ef4 kernel/sched/fair.c:8219 select_task_rq+0x164/0x3fc kernel/sched/core.c:3637 try_to_wake_up+0x388/0xf2c kernel/sched/core.c:4363 wake_up_process+0x18/0x24 kernel/sched/core.c:4510 kick_pool+0x3f0/0x59c kernel/workqueue.c:1280 __queue_work+0xdcc/0x12ac kernel/workqueue.c:2361 delayed_work_timer_fn+0x74/0x90 kernel/workqueue.c:2506 call_timer_fn+0x1b4/0x8e8 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1838 [inline] __run_timers kernel/time/timer.c:2417 [inline] __run_timer_base+0x59c/0x7b4 kernel/time/timer.c:2428 run_timer_base kernel/time/timer.c:2437 [inline] run_timer_softirq+0xcc/0x194 kernel/time/timer.c:2447 handle_softirqs+0x2e4/0xbfc kernel/softirq.c:554 __do_softirq+0x14/0x20 kernel/softirq.c:588 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:81 call_on_irq_stack+0x24/0x4c arch/arm64/kernel/entry.S:889 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:86 invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x1d8/0x434 kernel/softirq.c:637 irq_exit_rcu+0x14/0x84 kernel/softirq.c:649 __el1_irq arch/arm64/kernel/entry-common.c:537 [inline] el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:551 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:556 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:594 __daif_local_irq_restore arch/arm64/include/asm/irqflags.h:175 [inline] arch_local_irq_restore arch/arm64/include/asm/irqflags.h:195 [inline] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] _raw_spin_unlock_irqrestore+0x44/0x98 kernel/locking/spinlock.c:194 __debug_check_no_obj_freed lib/debugobjects.c:998 [inline] debug_check_no_obj_freed+0x460/0x47c lib/debugobjects.c:1019 slab_free_hook mm/slub.c:2163 [inline] slab_free mm/slub.c:4438 [inline] kfree+0x124/0x3e0 mm/slub.c:4559 krealloc_noprof+0xf0/0x148 bch2_printbuf_make_room+0x1b4/0x2f4 fs/bcachefs/printbuf.c:59 bch2_prt_printf+0x224/0x5c4 fs/bcachefs/printbuf.c:186 bch2_bpos_to_text+0x140/0x398 fs/bcachefs/bkey_methods.c:268 bch2_btree_path_to_text_short+0x1c8/0x2bc fs/bcachefs/btree_iter.c:1483 __bch2_trans_paths_to_text+0xc8/0x168 fs/bcachefs/btree_iter.c:1541 bch2_trans_paths_to_text+0x2c/0x3c fs/bcachefs/btree_iter.c:1549 bch2_trans_update_max_paths+0x15c/0x360 fs/bcachefs/btree_iter.c:1577 btree_path_alloc+0x508/0x6ec fs/bcachefs/btree_iter.c:1674 btree_path_clone fs/bcachefs/btree_iter.c:1235 [inline] __bch2_btree_path_make_mut+0x11c/0x508 fs/bcachefs/btree_iter.c:1249 bch2_btree_path_make_mut fs/bcachefs/btree_iter.h:196 [inline] __bch2_btree_path_set_pos+0x2a4/0x14f4 fs/bcachefs/btree_iter.c:1264 bch2_btree_path_set_pos fs/bcachefs/btree_iter.h:211 [inline] __bch2_btree_iter_peek fs/bcachefs/btree_iter.c:2176 [inline] bch2_btree_iter_peek_upto+0xa10/0x535c fs/bcachefs/btree_iter.c:2280 bch2_btree_iter_peek_upto_type fs/bcachefs/btree_iter.h:641 [inline] bch2_bucket_alloc_freelist fs/bcachefs/alloc_foreground.c:491 [inline] bch2_bucket_alloc_trans+0x858/0x29e4 fs/bcachefs/alloc_foreground.c:649 bch2_bucket_alloc_set_trans+0x490/0x9e4 fs/bcachefs/alloc_foreground.c:810 __open_bucket_add_buckets+0xfb4/0x18b4 fs/bcachefs/alloc_foreground.c:1058 open_bucket_add_buckets+0x160/0x220 fs/bcachefs/alloc_foreground.c:1102 bch2_alloc_sectors_start_trans+0xa74/0x1958 __bch2_btree_node_alloc fs/bcachefs/btree_update_interior.c:333 [inline] bch2_btree_reserve_get+0x4ac/0xf54 fs/bcachefs/btree_update_interior.c:547 bch2_btree_update_start+0xe78/0x15a0 fs/bcachefs/btree_update_interior.c:1245 bch2_btree_split_leaf+0x11c/0x734 fs/bcachefs/btree_update_interior.c:1851 bch2_trans_commit_error+0x2a4/0x1068 fs/bcachefs/btree_trans_commit.c:918 __bch2_trans_commit+0x35e4/0x592c fs/bcachefs/btree_trans_commit.c:1138 bch2_trans_commit fs/bcachefs/btree_update.h:170 [inline] bch2_extent_update+0x3d0/0x9b4 fs/bcachefs/io_write.c:326 bch2_fpunch_at+0x640/0xd98 fs/bcachefs/io_misc.c:184 __bch2_resume_logged_op_truncate+0x404/0x620 fs/bcachefs/io_misc.c:260 bch2_truncate+0x198/0x274 fs/bcachefs/io_misc.c:291 bchfs_truncate+0x668/0xa74 fs/bcachefs/fs-io.c:476 bch2_setattr+0x198/0x230 fs/bcachefs/fs.c:926 notify_change+0x9d4/0xc84 fs/attr.c:497 do_truncate fs/open.c:65 [inline] do_ftruncate+0x3e4/0x4cc fs/open.c:181 do_sys_ftruncate fs/open.c:199 [inline] __do_sys_ftruncate fs/open.c:207 [inline] __se_sys_ftruncate fs/open.c:205 [inline] __arm64_sys_ftruncate+0x94/0xec fs/open.c:205 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:131 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:150 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598