ci2 starts bisection 2025-07-29 22:03:50.494831352 +0000 UTC m=+7601.817307866 bisecting cause commit starting from ae388edd4a8f0226f3ef7b102c34f78220756c3d building syzkaller on c4a9548758bac1c6dc231afd7543b5e8c5b6a65e ensuring issue is reproducible on original commit ae388edd4a8f0226f3ef7b102c34f78220756c3d testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: b55ee384e7a62edd9c3dc06dd5ef38d7bc26e56e5188afa8018aeab386562373 run #0: basic kernel testing failed: failed to copy syz-execprog to VM: failed to run ["scp" "-P" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "-v" "/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/bin/linux_amd64/syz-execprog" "root@10.128.0.70:./syz-execprog"]: exit status 255 Executing: program /usr/bin/ssh host 10.128.0.70, user root, command sftp OpenSSH_9.2p1 Debian-2+deb12u6, OpenSSL 3.0.16 11 Feb 2025 debug1: Reading configuration data /dev/null debug1: Connecting to 10.128.0.70 [10.128.0.70] port 22. debug1: fd 3 clearing O_NONBLOCK debug1: Connection established. debug1: identity file /root/.ssh/id_rsa type -1 debug1: identity file /root/.ssh/id_rsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa type -1 debug1: identity file /root/.ssh/id_ecdsa-cert type -1 debug1: identity file /root/.ssh/id_ecdsa_sk type -1 debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1 debug1: identity file /root/.ssh/id_ed25519 type -1 debug1: identity file /root/.ssh/id_ed25519-cert type -1 debug1: identity file /root/.ssh/id_ed25519_sk type -1 debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1 debug1: identity file /root/.ssh/id_xmss type -1 debug1: identity file /root/.ssh/id_xmss-cert type -1 debug1: identity file /root/.ssh/id_dsa type -1 debug1: identity file /root/.ssh/id_dsa-cert type -1 debug1: Local version string SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u6 Connection timed out during banner exchange Connection to 10.128.0.70 port 22 timed out scp: Connection closed run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes run #10: crashed: INFO: task hung in bch2_run_recovery_passes run #11: crashed: INFO: task hung in bch2_run_recovery_passes run #12: crashed: INFO: task hung in bch2_run_recovery_passes run #13: crashed: INFO: task hung in bch2_run_recovery_passes run #14: crashed: INFO: task hung in bch2_run_recovery_passes run #15: crashed: INFO: task hung in bch2_run_recovery_passes run #16: crashed: INFO: task hung in bch2_run_recovery_passes run #17: crashed: INFO: task hung in bch2_copygc_stop run #18: crashed: INFO: task hung in bch2_copygc_stop run #19: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] check whether we can drop unnecessary instrumentation disabling configs for [locking atomic_sleep memleak ubsan bug_or_warning kasan], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 7ccc4e8f4804e2cd0052edeb2e7f493226d4a0a5e596594ab2cb5f1a285c3447 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_copygc_stop run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_copygc_stop run #9: crashed: INFO: task hung in bch2_copygc_stop representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] the bug reproduces without the instrumentation disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed kconfig minimization: base=4088 full=8321 leaves diff=2162 split chunks (needed=false): <2162> split chunk #0 of len 2162 into 5 parts testing without sub-chunk 1/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep memleak], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 64e217d6e64993520c1af32f44204259c6d76743cba8f1b8a0893cc44312d630 all runs: OK false negative chance: 0.000 testing without sub-chunk 2/5 disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 4e9b63defceda5e3baa75ea2de1883de43ad6af851eed196615129b681f56727 run #0: crashed: INFO: task hung in bch2_copygc_stop run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_copygc_stop, types: [HANG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [ubsan bug_or_warning kasan locking atomic_sleep memleak], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: acc8b2fc6beddbc1759beb3dc2ced11df4fecd2ffd6faed75e38e9443fe472ef run #0: crashed: INFO: task hung in corrupted run #1: crashed: INFO: task hung in bch2_copygc_stop run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_copygc_stop run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_copygc_stop run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_copygc_stop run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in corrupted, types: [HANG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: eaa1271422fb8dd9d7f64fa8d2be152b05bc7eca8eff19a8bcc7cebde366d7c7 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_copygc_stop run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_copygc_stop run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [locking atomic_sleep memleak ubsan bug_or_warning kasan], they are not needed testing commit ae388edd4a8f0226f3ef7b102c34f78220756c3d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 38c9748443b19073d543142c85e1c1f0ec02e1d8fd169225dbddfd8db3ca8901 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_copygc_stop run #8: crashed: INFO: task hung in bch2_copygc_stop run #9: crashed: INFO: task hung in bch2_copygc_stop representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] the chunk can be dropped minimized to 433 configs; suspects: [6LOWPAN 6LOWPAN_GHC_EXT_HDR_DEST 6LOWPAN_GHC_EXT_HDR_FRAG 6LOWPAN_GHC_EXT_HDR_HOP 6LOWPAN_GHC_EXT_HDR_ROUTE 6LOWPAN_GHC_ICMPV6 6LOWPAN_GHC_UDP 6LOWPAN_NHC 6LOWPAN_NHC_DEST 6LOWPAN_NHC_FRAGMENT 6LOWPAN_NHC_HOP 6LOWPAN_NHC_IPV6 6LOWPAN_NHC_MOBILITY 6LOWPAN_NHC_ROUTING 6LOWPAN_NHC_UDP 6PACK 842_COMPRESS 842_DECOMPRESS 9P_FSCACHE 9P_FS_POSIX_ACL 9P_FS_SECURITY ACORN_PARTITION ACORN_PARTITION_ADFS ACORN_PARTITION_CUMANA ACORN_PARTITION_EESOX ACORN_PARTITION_ICS ACORN_PARTITION_POWERTEC ACORN_PARTITION_RISCIX ACPI_NFIT ACPI_NHLT ACPI_PLATFORM_PROFILE ADFS_FS AFFS_FS AFS_FS AFS_FSCACHE AF_KCM AF_RXRPC AF_RXRPC_IPV6 AIX_PARTITION AMD_SFH_HID AMIGA_PARTITION ANDROID_BINDERFS ANDROID_BINDER_IPC ANON_VMA_NAME APERTURE_HELPERS APPLE_MFI_FASTCHARGE AR5523 ARCH_HAS_USER_SHADOW_STACK ASM_MODVERSIONS ASUS_TF103C_DOCK ASYNC_CORE ASYNC_MEMCPY ASYNC_PQ ASYNC_RAID6_RECOV ASYNC_TX_DMA ASYNC_XOR ATARI_PARTITION ATA_GENERIC ATA_OVER_ETH ATH10K ATH10K_CE ATH10K_LEDS ATH10K_PCI ATH10K_USB ATH11K ATH6KL ATH6KL_USB ATH9K ATH9K_AHB ATH9K_BTCOEX_SUPPORT ATH9K_CHANNEL_CONTEXT ATH9K_COMMON ATH9K_COMMON_DEBUG ATH9K_COMMON_SPECTRAL ATH9K_DEBUGFS ATH9K_DYNACK ATH9K_HTC ATH9K_HTC_DEBUGFS ATH9K_HW ATH9K_PCI ATH9K_PCOEM ATH9K_RFKILL ATH_COMMON ATM ATM_BR2684 ATM_CLIP ATM_DRIVERS ATM_LANE ATM_MPOA ATM_TCP AUXILIARY_BUS AX25 AX25_DAMA_SLAVE AX88796B_PHY BAREUDP BATMAN_ADV BATMAN_ADV_BATMAN_V BATMAN_ADV_BLA BATMAN_ADV_DAT BATMAN_ADV_MCAST BATMAN_ADV_NC BCACHE BCACHEFS_DEBUG BCACHEFS_ERASURE_CODING BCACHEFS_FS BCACHEFS_POSIX_ACL BCACHEFS_QUOTA BCACHEFS_SIX_OPTIMISTIC_SPIN BCMA BCMA_HOST_PCI_POSSIBLE BEFS_FS BFQ_CGROUP_DEBUG BFQ_GROUP_IOSCHED BFS_FS BIG_KEYS BLK_CGROUP_PUNT_BIO BLK_CGROUP_RWSTAT BLK_DEV_BSGLIB BLK_DEV_INTEGRITY BLK_DEV_NBD BLK_DEV_NULL_BLK BLK_DEV_NULL_BLK_FAULT_INJECTION BLK_DEV_NVME BLK_DEV_PMEM BLK_DEV_RAM BLK_DEV_RNBD BLK_DEV_RNBD_CLIENT BLK_DEV_THROTTLING BLK_ICQ BLK_INLINE_ENCRYPTION BLK_INLINE_ENCRYPTION_FALLBACK BLK_WBT BLK_WBT_MQ BONDING BOOT_VESA_SUPPORT BPF_EVENTS BPF_JIT BPF_JIT_ALWAYS_ON BPF_JIT_DEFAULT_ON BPF_LSM BPF_PRELOAD BPF_PRELOAD_UMD BPF_SYSCALL BPQETHER BRIDGE BRIDGE_CFM BRIDGE_EBT_802_3 BRIDGE_EBT_AMONG BRIDGE_EBT_ARP BRIDGE_EBT_ARPREPLY BRIDGE_EBT_BROUTE BRIDGE_EBT_DNAT BRIDGE_EBT_IP BRIDGE_EBT_IP6 BRIDGE_EBT_LIMIT BRIDGE_EBT_LOG BRIDGE_EBT_MARK BRIDGE_EBT_MARK_T BRIDGE_EBT_NFLOG BRIDGE_EBT_PKTTYPE BRIDGE_EBT_REDIRECT BRIDGE_EBT_SNAT BRIDGE_EBT_STP BRIDGE_EBT_T_FILTER BRIDGE_EBT_T_NAT BRIDGE_EBT_VLAN BRIDGE_IGMP_SNOOPING BRIDGE_MRP BRIDGE_NF_EBTABLES BRIDGE_NF_EBTABLES_LEGACY BRIDGE_VLAN_FILTERING BSD_DISKLABEL BSD_PROCESS_ACCT_V3 BT BTRFS_ASSERT BTRFS_FS BTRFS_FS_POSIX_ACL BTRFS_FS_REF_VERIFY BTT BT_6LOWPAN BT_ATH3K BT_BCM BT_BNEP BT_BNEP_MC_FILTER BT_BNEP_PROTO_FILTER BT_BREDR BT_HCIBCM203X BT_HCIBFUSB BT_HCIBPA10X BT_HCIBTUSB BT_HCIBTUSB_AUTOSUSPEND BT_HCIBTUSB_BCM BT_HCIBTUSB_MTK BT_HCIBTUSB_POLL_SYNC BT_HCIBTUSB_RTL BT_HCIUART BT_HCIUART_3WIRE BT_HCIUART_AG6XX BT_HCIUART_BCSP BT_HCIUART_H4 BT_HCIUART_LL BT_HCIUART_MRVL BT_HCIUART_QCA BT_HCIUART_SERDEV BT_HCIVHCI BT_INTEL BT_LE BT_LEDS BT_LE_L2CAP_ECRED BT_MRVL BT_MRVL_SDIO BT_MSFTEXT BT_MTK BT_MTKSDIO BT_MTKUART BT_QCA BT_RFCOMM BT_RFCOMM_TTY BT_RTL CACHEFILES CAIF CAIF_DEBUG CAIF_DRIVERS CAIF_NETDEV CAIF_TTY CAIF_USB CAIF_VIRTIO CAN CAN_8DEV_USB CAN_BCM CAN_CALC_BITTIMING CAN_DEV CAN_EMS_USB CAN_ESD_USB CAN_ETAS_ES58X CAN_F81604 CAN_GS_USB CAN_GW CAN_IFI_CANFD CAN_ISOTP CAN_J1939 CAN_KVASER_USB CAN_MCBA_USB CAN_NETLINK CAN_PEAK_USB CAN_RAW CAN_RX_OFFLOAD CAN_SLCAN CAN_UCAN CAN_VCAN CAN_VXCAN CARL9170 CARL9170_HWRNG CARL9170_LEDS CARL9170_WPC CEC_CORE CEPH_FS CEPH_FSCACHE CEPH_FS_POSIX_ACL CEPH_LIB CEPH_LIB_USE_DNS_RESOLVER CFG80211 CFG80211_CRDA_SUPPORT CFG80211_DEBUGFS CFG80211_DEFAULT_PS CFG80211_REQUIRE_SIGNED_REGDB CFG80211_USE_KERNEL_REGDB_KEYS CFG80211_WEXT CFS_BANDWIDTH CHARGER_ISP1704 CHR_DEV_ST CIFS CIFS_ALLOW_INSECURE_LEGACY CIFS_DEBUG CIFS_DFS_UPCALL CIFS_FSCACHE CIFS_POSIX CIFS_SMB_DIRECT CIFS_SWN_UPCALL CIFS_UPCALL CIFS_XATTR CLOSURES CLS_U32_MARK CLS_U32_PERF CMA CMA_SIZE_SEL_MAX CMDLINE_PARTITION COMEDI COMEDI_8254 COMEDI_8255 COMEDI_8255_PCI COMEDI_8255_SA COMEDI_ADL_PCI9118 COMEDI_ADQ12B COMEDI_AIO_AIO12_8 COMEDI_AIO_IIRO_16 COMEDI_AMPLC_DIO200 COMEDI_AMPLC_DIO200_ISA COMEDI_AMPLC_PC236 COMEDI_AMPLC_PC236_ISA COMEDI_AMPLC_PC263_ISA COMEDI_BOND COMEDI_C6XDIGIO COMEDI_DAC02 COMEDI_DAS08 COMEDI_DAS08_ISA COMEDI_DAS16M1 COMEDI_DAS1800 COMEDI_DAS6402 COMEDI_DAS800 COMEDI_DMM32AT COMEDI_DT2801 COMEDI_DT2811 COMEDI_DT2814 COMEDI_DT2815 COMEDI_DT2817 COMEDI_DT282X COMEDI_DT9812 COMEDI_FL512 COMEDI_ISADMA COMEDI_ISA_DRIVERS COMEDI_KCOMEDILIB COMEDI_MISC_DRIVERS COMEDI_MPC624 COMEDI_MULTIQ3 COMEDI_NI_ATMIO16D COMEDI_NI_AT_A2150 COMEDI_NI_AT_AO COMEDI_NI_DAQ_700_CS COMEDI_NI_LABPC COMEDI_NI_LABPC_CS COMEDI_NI_LABPC_ISA COMEDI_NI_LABPC_ISADMA COMEDI_NI_LABPC_PCI COMEDI_NI_USB6501 COMEDI_PARPORT COMEDI_PCI_DRIVERS COMEDI_PCL711 COMEDI_PCL724 COMEDI_PCL726 COMEDI_PCL730 COMEDI_PCL812 COMEDI_PCL816 COMEDI_PCL818 COMEDI_PCM3724 COMEDI_PCMAD COMEDI_PCMCIA_DRIVERS COMEDI_PCMDA12 COMEDI_PCMMIO COMEDI_PCMUIO COMEDI_RTI800 COMEDI_RTI802 COMEDI_S526 COMEDI_TEST COMEDI_USBDUX COMEDI_USBDUXFAST COMEDI_USBDUXSIGMA COMEDI_USB_DRIVERS COMEDI_VMK80XX COMPAT_NETLINK_MESSAGES COUNTER CRAMFS CRAMFS_BLOCKDEV CRAMFS_MTD CRC64 CRC64_ARCH CRC8 CRC_ITU_T CRC_T10DIF CRC_T10DIF_ARCH CRYPTO_842 CRYPTO_ADIANTUM CRYPTO_AEGIS128 CRYPTO_AEGIS128_AESNI_SSE2 CRYPTO_AES_NI_INTEL CRYPTO_AES_TI CRYPTO_ANSI_CPRNG CRYPTO_ANUBIS CRYPTO_ARC4 CRYPTO_ARCH_HAVE_LIB_BLAKE2S CRYPTO_ARCH_HAVE_LIB_CHACHA CRYPTO_ARCH_HAVE_LIB_CURVE25519 CRYPTO_ARCH_HAVE_LIB_POLY1305 CRYPTO_ARIA CRYPTO_ARIA_AESNI_AVX_X86_64 CRYPTO_BLAKE2B CRYPTO_BLAKE2S_X86 CRYPTO_BLOWFISH CRYPTO_BLOWFISH_COMMON CRYPTO_BLOWFISH_X86_64 CRYPTO_CAMELLIA CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 CRYPTO_CAMELLIA_AESNI_AVX_X86_64 CRYPTO_CAMELLIA_X86_64 CRYPTO_CAST5 CRYPTO_CAST5_AVX_X86_64 CRYPTO_CAST6 CRYPTO_CAST6_AVX_X86_64 CRYPTO_CAST_COMMON CRYPTO_CHACHA20 CRYPTO_CHACHA20POLY1305 CRYPTO_CHACHA20_X86_64 CRYPTO_CRC32C CRYPTO_CRYPTD CRYPTO_CTS CRYPTO_CURVE25519 CRYPTO_CURVE25519_X86 CRYPTO_DEFLATE CRYPTO_DES CRYPTO_DES3_EDE_X86_64 CRYPTO_DEV_CCP CRYPTO_DEV_CCP_DD CRYPTO_DEV_PADLOCK CRYPTO_DEV_PADLOCK_AES CRYPTO_DEV_PADLOCK_SHA CRYPTO_DEV_QAT CRYPTO_DEV_QAT_C3XXX CRYPTO_DEV_QAT_C3XXXVF CRYPTO_DEV_QAT_C62X CRYPTO_DEV_QAT_C62XVF CRYPTO_DEV_QAT_DH895xCC CRYPTO_DEV_QAT_DH895xCCVF CRYPTO_DEV_VIRTIO CRYPTO_DH CRYPTO_DRBG_CTR CRYPTO_DRBG_HASH CRYPTO_ECDH CRYPTO_ECRDSA CRYPTO_ENGINE CRYPTO_ESSIV CRYPTO_FCRYPT CRYPTO_GHASH_CLMUL_NI_INTEL CRYPTO_HCTR2 CRYPTO_HKDF CRYPTO_KDF800108_CTR CRYPTO_KHAZAD CRYPTO_KPP CRYPTO_KRB5 CRYPTO_KRB5ENC CRYPTO_LIB_ARC4 CRYPTO_LIB_CHACHA CRYPTO_LIB_CHACHA20POLY1305 CRYPTO_LIB_CHACHA_GENERIC CRYPTO_LIB_CURVE25519 CRYPTO_LIB_CURVE25519_GENERIC CRYPTO_LIB_CURVE25519_INTERNAL CRYPTO_LIB_DES CRYPTO_LIB_POLY1305 CRYPTO_LIB_POLY1305_GENERIC CRYPTO_LIB_SHA1_ARCH CRYPTO_LIB_SHA256_ARCH CRYPTO_LIB_SHA512 CRYPTO_LIB_SHA512_ARCH CRYPTO_LIB_SM3 CRYPTO_LRW CRYPTO_LZ4 CRYPTO_LZ4HC CRYPTO_MICHAEL_MIC CRYPTO_NHPOLY1305 CRYPTO_NHPOLY1305_AVX2 CRYPTO_NHPOLY1305_SSE2 CRYPTO_PCBC CRYPTO_PCRYPT CRYPTO_POLY1305_X86_64 CRYPTO_POLYVAL CRYPTO_POLYVAL_CLMUL_NI CRYPTO_RMD160 CRYPTO_SEED CRYPTO_SERPENT CRYPTO_SERPENT_AVX2_X86_64 CRYPTO_SERPENT_AVX_X86_64 CRYPTO_SERPENT_SSE2_X86_64 CRYPTO_SM3_AVX_X86_64 CRYPTO_SM4 CRYPTO_SM4_AESNI_AVX2_X86_64 CRYPTO_SM4_AESNI_AVX_X86_64 CRYPTO_SM4_GENERIC CRYPTO_STREEBOG CRYPTO_TEA CRYPTO_TWOFISH CRYPTO_TWOFISH_AVX_X86_64 CRYPTO_TWOFISH_COMMON CRYPTO_TWOFISH_X86_64 CRYPTO_TWOFISH_X86_64_3WAY CRYPTO_USER CRYPTO_USER_API CRYPTO_USER_API_AEAD CRYPTO_USER_API_ENABLE_OBSOLETE CRYPTO_USER_API_HASH CRYPTO_USER_API_RNG CRYPTO_USER_API_SKCIPHER CRYPTO_WP512 CRYPTO_XCBC CRYPTO_XCTR CRYPTO_XTS CRYPTO_XXHASH CRYPTO_ZSTD CUSE CYPRESS_FIRMWARE DAMON DAMON_PADDR DAMON_RECLAIM DAMON_VADDR DCA DCB DMA_CMA FSCACHE FUSE_FS GPIOLIB HAMRADIO INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_RTRS_CLIENT IOSCHED_BFQ ISA_BUS LIBNVDIMM MAC80211 MAC80211_DEBUGFS MAC80211_LEDS MEDIA_SUPPORT MMC MTD NET_CLS_U32 PARTITION_ADVANCED PCCARD PCMCIA RFKILL SERIAL_DEV_BUS TLS TLS_DEVICE USB_GADGET USB_PHY VLAN_8021Q WANT_COMPAT_NETLINK_MESSAGES WEXT_CORE WIRELESS WLAN WLAN_VENDOR_ATH] disabling configs for [memleak ubsan bug_or_warning kasan locking atomic_sleep], they are not needed picked [v6.16 v6.15 v6.14 v6.12 v6.10 v6.8 v6.6 v6.4 v6.1 v5.18 v5.15 v5.12 v5.9 v5.6 v5.3 v5.0 v4.19] out of 39 release tags testing release v6.16 testing commit 038d61fd642278bab63ee8ef722c50d10ab01e8f gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: a757ac3b2bc157e876c1bc24600ab3f93d0368f289e07b8e4cff18553708bb6e all runs: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] testing release v6.15 testing commit 0ff41df1cb268fc69e703a08a57ee14ae967d0ca gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: c1cca1250ab56f064229d25f2519fad8daa5c7089fbc23c280ec7c3c414bf760 all runs: OK false negative chance: 0.000 # git bisect start 038d61fd642278bab63ee8ef722c50d10ab01e8f 0ff41df1cb268fc69e703a08a57ee14ae967d0ca Bisecting: 7873 revisions left to test after this (roughly 13 steps) [43db1111073049220381944af4a3b8a5400eda71] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm testing commit 43db1111073049220381944af4a3b8a5400eda71 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 3f6b2fe64a55b5b9d6ce7b2cf788ed3c92aa4589822bf47753447cd12e87ad7b run #0: crashed: INFO: task hung in bch2_copygc_stop run #1: crashed: INFO: task hung in bch2_copygc_stop run #2: crashed: INFO: task hung in bch2_copygc_stop run #3: crashed: INFO: task hung in bch2_copygc_stop run #4: crashed: INFO: task hung in bch2_copygc_stop run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_copygc_stop, types: [HANG] # git bisect bad 43db1111073049220381944af4a3b8a5400eda71 Bisecting: 4089 revisions left to test after this (roughly 12 steps) [a61e26038143727d9b0f1bc01b0370f77f2ad7e4] Merge tag 'media/v6.16-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media testing commit a61e26038143727d9b0f1bc01b0370f77f2ad7e4 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: eba4b9b8b00867eb98ed7af92f164e3a01024d028fdfe1c2292335fe836994b0 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_copygc_stop run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad a61e26038143727d9b0f1bc01b0370f77f2ad7e4 Bisecting: 1981 revisions left to test after this (roughly 11 steps) [0c1494015fea0935fbf6cd9d99c008fcbe1e4165] Merge tag 'core-entry-2025-05-25' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip testing commit 0c1494015fea0935fbf6cd9d99c008fcbe1e4165 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 97d5cc309b8787fa0c600bc01ff471dc79ba8c7dc8ffdafd6e00067c977b3265 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_copygc_stop representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad 0c1494015fea0935fbf6cd9d99c008fcbe1e4165 Bisecting: 1061 revisions left to test after this (roughly 10 steps) [15d90a5e5524532b7456a24f4626cf28c1629c4c] Merge tag 'crc-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux testing commit 15d90a5e5524532b7456a24f4626cf28c1629c4c gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: ce9162dd01587888f6a7dbf0454580810abafde187e2a73bd44ede3fbb3e2274 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_copygc_stop run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_copygc_stop run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_copygc_stop run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad 15d90a5e5524532b7456a24f4626cf28c1629c4c Bisecting: 507 revisions left to test after this (roughly 9 steps) [49fffac983ac52aea0ab94914be3f56bcf92d5dc] Merge tag 'for-6.16/io_uring-20250523' of git://git.kernel.dk/linux testing commit 49fffac983ac52aea0ab94914be3f56bcf92d5dc gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 266cd32889b1475342a2131bfc3f37b48b74772cf7af8b058ecc4ebbb5fb8988 all runs: OK false negative chance: 0.000 # git bisect good 49fffac983ac52aea0ab94914be3f56bcf92d5dc Bisecting: 276 revisions left to test after this (roughly 8 steps) [8fdabcd9c01d9ac585d8109a921e0734a69479fb] Merge tag 'gfs2-for-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2 testing commit 8fdabcd9c01d9ac585d8109a921e0734a69479fb gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 46bde674674697da35b17924825c6f1de3ad4a5be36506a4c0acc05280741f65 all runs: OK false negative chance: 0.000 # git bisect good 8fdabcd9c01d9ac585d8109a921e0734a69479fb Bisecting: 138 revisions left to test after this (roughly 7 steps) [3b7b0c3996b570f9c305c6f3df475a719920d65c] bcachefs: print label correctly in sb_member_to_text() testing commit 3b7b0c3996b570f9c305c6f3df475a719920d65c gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 03e24e760e23091de6b7beb2d589fc720e5e79a906f9fe83ffc6f0d08a5c4000 all runs: OK false negative chance: 0.000 # git bisect good 3b7b0c3996b570f9c305c6f3df475a719920d65c Bisecting: 69 revisions left to test after this (roughly 6 steps) [eb34365adae033659384d1dedae99f73abd9815a] bcachefs: Clear should_be_locked before unlock in key_cache_drop() testing commit eb34365adae033659384d1dedae99f73abd9815a gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: e4c4917e7504b1eaad0fbd1a31fc185fae4d2ae581033e6968f898e9f54e5151 run #0: ignore: lost connection to test machine run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_copygc_stop run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_copygc_stop run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad eb34365adae033659384d1dedae99f73abd9815a Bisecting: 34 revisions left to test after this (roughly 5 steps) [7ed4c14e20be2b113e111ec9fa1803c778e00280] bcachefs: Reduce usage of recovery.curr_pass testing commit 7ed4c14e20be2b113e111ec9fa1803c778e00280 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 5a330c6585959f676a48be7df9bb8752590ad3201329ddad129cc17097f95ed9 all runs: OK false negative chance: 0.000 # git bisect good 7ed4c14e20be2b113e111ec9fa1803c778e00280 Bisecting: 17 revisions left to test after this (roughly 4 steps) [011d644b769609ecf6ceef71a1411c4a9e008a5b] bcachefs: subvol_inum_eq() testing commit 011d644b769609ecf6ceef71a1411c4a9e008a5b gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 999f423829bf7b3c1481be53afb534699d7de08a26a1be7dbbabc5278d81cc8a all runs: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad 011d644b769609ecf6ceef71a1411c4a9e008a5b Bisecting: 8 revisions left to test after this (roughly 3 steps) [51e23c9d60a42f8da4d2f4d48c86eb00c4e351ea] bcachefs: async objs now support bch_write_ops testing commit 51e23c9d60a42f8da4d2f4d48c86eb00c4e351ea gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: da5de101df565425ec2d75766312dabd409987769e6c23c1e4741edfc7d54bb6 run #0: crashed: INFO: task hung in bch2_copygc_stop run #1: crashed: INFO: task hung in bch2_copygc_stop run #2: crashed: INFO: task hung in bch2_copygc_stop run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_copygc_stop run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_copygc_stop run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_copygc_stop, types: [HANG] # git bisect bad 51e23c9d60a42f8da4d2f4d48c86eb00c4e351ea Bisecting: 3 revisions left to test after this (roughly 2 steps) [15f969326ee296f7b7faf7704105a99fa02c288d] bcachefs: Improve bucket_bitmap code testing commit 15f969326ee296f7b7faf7704105a99fa02c288d gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 9bdebb2ceec2bf1e242c2b44df6d1b6dd535e48b359e516be62e71175e027406 all runs: OK false negative chance: 0.000 # git bisect good 15f969326ee296f7b7faf7704105a99fa02c288d Bisecting: 1 revision left to test after this (roughly 1 step) [6b86da9282b0f6a3fb7aae709dca9feb4c8316b5] bcachefs: fsck: Include loops in error messages testing commit 6b86da9282b0f6a3fb7aae709dca9feb4c8316b5 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: b3dcd414f8ccb3e34678c7b7d3c33c4125881135517b93b2dcd2db158bd15d99 run #0: crashed: INFO: task hung in bch2_run_recovery_passes run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_run_recovery_passes run #3: crashed: INFO: task hung in bch2_copygc_stop run #4: crashed: INFO: task hung in bch2_copygc_stop run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_copygc_stop run #7: crashed: INFO: task hung in bch2_copygc_stop run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_run_recovery_passes representative crash: INFO: task hung in bch2_run_recovery_passes, types: [HANG] # git bisect bad 6b86da9282b0f6a3fb7aae709dca9feb4c8316b5 Bisecting: 0 revisions left to test after this (roughly 0 steps) [39cea302f13a0a9dc4cf39248529a42e79d06842] bcachefs: bch2_check_bucket_backpointer_mismatch() testing commit 39cea302f13a0a9dc4cf39248529a42e79d06842 gcc compiler: Debian clang version 20.1.7 (++20250616065708+6146a88f6049-1~exp1~20250616065826.132), Debian LLD 20.1.7 kernel signature: 0c4990e9e2a62fdc8dae1a3538cdbf9360b2d24a0ed6f5a5869341829d831774 run #0: crashed: INFO: task hung in bch2_copygc_stop run #1: crashed: INFO: task hung in bch2_run_recovery_passes run #2: crashed: INFO: task hung in bch2_copygc_stop run #3: crashed: INFO: task hung in bch2_run_recovery_passes run #4: crashed: INFO: task hung in bch2_run_recovery_passes run #5: crashed: INFO: task hung in bch2_run_recovery_passes run #6: crashed: INFO: task hung in bch2_run_recovery_passes run #7: crashed: INFO: task hung in bch2_run_recovery_passes run #8: crashed: INFO: task hung in bch2_run_recovery_passes run #9: crashed: INFO: task hung in bch2_copygc_stop representative crash: INFO: task hung in bch2_copygc_stop, types: [HANG] # git bisect bad 39cea302f13a0a9dc4cf39248529a42e79d06842 39cea302f13a0a9dc4cf39248529a42e79d06842 is the first bad commit commit 39cea302f13a0a9dc4cf39248529a42e79d06842 Author: Kent Overstreet Date: Fri May 9 17:01:05 2025 -0400 bcachefs: bch2_check_bucket_backpointer_mismatch() Detect buckets with missing backpointers, and run repair on demand. __bch2_move_data_phys() now calls bch2_check_bucket_backpointer_mismatch() as it walks buckets, which checks for missing backpointers by comparing backpointers against bucket sector counts. When missing backpointers are detected, we kick off bch2_check_extents_to_backpointers() asynchronously - right away if we're trying to evacuate, or with a threshold if we're just running copygc. Signed-off-by: Kent Overstreet fs/bcachefs/alloc_background.c | 7 ++-- fs/bcachefs/backpointers.c | 75 +++++++++++++++++++++++++++++++++++++++--- fs/bcachefs/backpointers.h | 3 +- fs/bcachefs/move.c | 21 ++++++++++-- fs/bcachefs/movinggc.c | 3 ++ 5 files changed, 98 insertions(+), 11 deletions(-) accumulated error probability: 0.00 culprit signature: 0c4990e9e2a62fdc8dae1a3538cdbf9360b2d24a0ed6f5a5869341829d831774 parent signature: 9bdebb2ceec2bf1e242c2b44df6d1b6dd535e48b359e516be62e71175e027406 revisions tested: 23, total time: 6h12m42.923390427s (build: 1h59m57.722834484s, test: 3h51m45.167446994s) first bad commit: 39cea302f13a0a9dc4cf39248529a42e79d06842 bcachefs: bch2_check_bucket_backpointer_mismatch() recipients (to): ["kent.overstreet@linux.dev"] recipients (cc): [] crash: INFO: task hung in bch2_copygc_stop INFO: task syz-executor:2927 blocked for more than 143 seconds. Not tainted 6.15.0-rc4-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor state:D stack:11352 pid:2927 tgid:2927 ppid:1 task_flags:0x400140 flags:0x00004006 Call Trace: context_switch kernel/sched/core.c:5382 [inline] __schedule+0x756/0xc10 kernel/sched/core.c:6767 __schedule_loop kernel/sched/core.c:6845 [inline] schedule+0xac/0x140 kernel/sched/core.c:6860 schedule_timeout+0x2c/0x160 kernel/time/sleep_timeout.c:75 do_wait_for_common kernel/sched/completion.c:95 [inline] __wait_for_common kernel/sched/completion.c:116 [inline] wait_for_common+0xfa/0x1e0 kernel/sched/completion.c:127 kthread_stop+0x7d/0x1d0 kernel/kthread.c:791 bch2_copygc_stop+0x1d/0xb0 fs/bcachefs/movinggc.c:438 __bch2_fs_read_only+0x31/0x1d0 fs/bcachefs/super.c:292 bch2_fs_read_only+0x18c/0x3b0 fs/bcachefs/super.c:378 __bch2_fs_stop+0x5d/0x2c0 fs/bcachefs/super.c:690 generic_shutdown_super+0x74/0x110 fs/super.c:642 bch2_kill_sb+0x11/0x20 fs/bcachefs/fs.c:2605 deactivate_locked_super+0x33/0x150 fs/super.c:473 cleanup_mnt+0x7c/0x130 fs/namespace.c:1435 task_work_run+0x84/0xb0 kernel/task_work.c:227 resume_user_mode_work+0x52/0x60 include/linux/resume_user_mode.h:50 exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x77/0xc0 kernel/entry/common.c:218 do_syscall_64+0x9c/0x180 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f4ed011fcd7 RSP: 002b:00007ffeedcd5328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 RAX: 0000000000000000 RBX: 00007f4ed01a0b55 RCX: 00007f4ed011fcd7 RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeedcd53e0 RBP: 00007ffeedcd53e0 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeedcd6470 R13: 00007f4ed01a0b55 R14: 0000000000011f2b R15: 00007ffeedcd64b0 Showing all locks held in the system: 1 lock held by khungtaskd/31: #0: ffffffff83b84b30 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #0: ffffffff83b84b30 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #0: ffffffff83b84b30 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2e/0x100 kernel/locking/lockdep.c:6764 2 locks held by getty/1448: #0: ffff888104eaf8a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x20/0x40 drivers/tty/tty_ldisc.c:243 #1: ffffc90002c8b2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x1c9/0x6f0 drivers/tty/n_tty.c:2222 2 locks held by syz-executor/2920: #0: ffff8881474750e0 (&type->s_umount_key#50){....}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff8881474750e0 (&type->s_umount_key#50){....}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff8881474750e0 (&type->s_umount_key#50){....}-{3:3}, at: deactivate_super+0x33/0x40 fs/super.c:505 #1: ffff88816a800278 (&c->state_lock){....}-{3:3}, at: __bch2_fs_stop+0x55/0x2c0 fs/bcachefs/super.c:689 2 locks held by syz-executor/2927: #0: ffff8881053270e0 (&type->s_umount_key#50){....}-{3:3}, at: __super_lock fs/super.c:56 [inline] #0: ffff8881053270e0 (&type->s_umount_key#50){....}-{3:3}, at: __super_lock_excl fs/super.c:71 [inline] #0: ffff8881053270e0 (&type->s_umount_key#50){....}-{3:3}, at: deactivate_super+0x33/0x40 fs/super.c:505 #1: ffff88812c280278 (&c->state_lock){....}-{3:3}, at: __bch2_fs_stop+0x55/0x2c0 fs/bcachefs/super.c:689 2 locks held by bch-copygc/loop/5014: #0: ffff88812c284380 (&c->btree_trans_barrier){....}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline] #0: ffff88812c284380 (&c->btree_trans_barrier){....}-{0:0}, at: srcu_read_lock include/linux/srcu.h:253 [inline] #0: ffff88812c284380 (&c->btree_trans_barrier){....}-{0:0}, at: bch2_trans_srcu_lock+0x2f/0x80 fs/bcachefs/btree_iter.c:3257 #1: ffff88812c2a66d0 (&c->gc_lock){....}-{3:3}, at: bch2_btree_update_start+0x254/0x860 fs/bcachefs/btree_update_interior.c:1186 2 locks held by syz.4.571/12505: 2 locks held by syz.0.572/12508: 5 locks held by bch-copygc/loop/12516: 2 locks held by syz.2.570/12519: 1 lock held by syz.5.574/12521: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 Call Trace: dump_stack_lvl+0xa2/0xf0 lib/dump_stack.c:120 nmi_cpu_backtrace+0x109/0x170 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x8e/0x140 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:158 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:274 [inline] watchdog+0x604/0x630 kernel/hung_task.c:437 kthread+0x200/0x230 kernel/kthread.c:464 ret_from_fork+0x32/0x40 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 12521 Comm: syz.5.574 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:exit_to_user_mode_prepare include/linux/entry-common.h:331 [inline] RIP: 0010:irqentry_exit_to_user_mode+0x79/0xc0 kernel/entry/common.c:231 Code: a9 04 00 02 00 74 0b 48 89 df e8 02 0f 64 fe 4c 89 f8 a8 02 74 08 48 89 df e8 53 8d 80 fe e8 be 8d 80 fe e8 d9 8d 80 fe eb a2 52 92 80 fe e8 bd 92 80 fe e8 38 2e 7c fe 90 90 90 66 90 b9 01 RSP: 0000:ffffc900019fbf38 EFLAGS: 00000046 RAX: 0000000000000001 RBX: ffffc900019fbf58 RCX: ed75d38bd9692e00 RDX: ffff8881097c4800 RSI: ffffffff83629309 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000007 R10: 0000000000000001 R11: 000000000000000c R12: 0000000000000000 R13: 0000000000000000 R14: ffff88813b45d340 R15: 0000000000000000 FS: 00007f49138266c0(0000) GS:ffff8882b3358000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f490b882000 CR3: 000000012b730000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f4914480d46 Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 RSP: 002b:00007f49138254a0 EFLAGS: 00010206 RAX: 000000000047c001 RBX: 00007f4913825540 RCX: 0000000000000025 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f49138255e0 RBP: 0000000000000102 R08: 00007f490b406000 R09: 000000000047c000 R10: 0000000000000000 R11: 00007f4913825550 R12: 0000000000000001 R13: 00007f491465c880 R14: 0000000000000000 R15: 00007f49138255e0