program: r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="d0187f00ffffffffffff08021100000050505050505020"], 0x2f) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x818001, &(0x7f0000000100)=ANY=[@ANYBLOB="726174656c696d69745f6572726f72732c6e6f6368616e6765732c6572726f72733d636f6e74696e75652c696efcf07a71c837c05d962a93e9b36c696e655f646174612c726174766c696d69745f6572726f72772c766572626f73652c7265636f766572795f706173735f6c6173743d636865636b5f696e6f6465732c7265636f6e7374727563745f"], 0x1, 0x596d, &(0x7f0000005c40)="$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") [ 113.444194][ T4669] Bluetooth: hci0: command tx timeout [ 113.510240][ T5338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.811803][ T5338] loop0: detected capacity change from 0 to 32768 [ 113.962531][ T5338] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,recovery_pass_last=check_inodes,nojournal_transaction_names,read_only [ 113.962550][ T5338] allowing incompatible features above 0.0: (unknown version) [ 113.962556][ T5338] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 113.982785][ T5338] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 113.986953][ T5338] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 113.991670][ T5338] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 113.991687][ T5338] has non ptr field, deleting [ 114.006398][ T5338] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 114.009732][ T5338] bcachefs (loop0): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 114.009732][ T5338] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 114.009732][ T5338] running recovery passes: check_extents_to_backpointers,check_inodes [ 114.076518][ T5338] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 114.076553][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 114.076563][ T5338] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.076570][ T5338] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 114.076578][ T5338] node offset 8/16 bset u64s 49 bset byte offset 96: keys out of order: u64s 7 type extent 3746994889972256771:8:U32_MAX len 8 ver 0 > u64s 10 type inline_data 4100:8:U32_MAX len 8 ver 0 [ 114.076588][ T5338] repair success (rewriting node) [ 114.110310][ T5338] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 114.110325][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 114.110334][ T5338] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.110341][ T5338] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 114.110349][ T5338] repair success (rewriting node) [ 114.139685][ T5338] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 114.139701][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 114.139709][ T5338] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.139720][ T5338] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 114.139727][ T5338] repair success (rewriting node) [ 114.167683][ T5338] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 114.167698][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 7 [ 114.167706][ T5338] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.167714][ T5338] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 114.167723][ T5338] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0 [ 114.167732][ T5338] loop0 node offset 16/24 bset u64s 0: unsupported bset version 0.0 [ 114.167739][ T5338] flagging btree alloc lost data [ 114.167744][ T5338] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 114.167752][ T5338] running recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 114.167760][ T5338] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 114.167766][ T5338] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 114.167774][ T5338] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 114.167781][ T5338] ret btree_node_read_err_incompatible [ 114.227944][ T5338] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 114.235527][ T5338] bcachefs (loop0): btree node read error at btree subvolumes level 0/0 [ 114.235541][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 114.235549][ T5338] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.235558][ T5338] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 114.235566][ T5338] repair success (rewriting node) [ 114.262377][ T5338] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 114.262391][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 114.262401][ T5338] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.262409][ T5338] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 114.262417][ T5338] repair success (rewriting node) [ 114.288044][ T5338] bcachefs (loop0): btree node read error at btree lru level 0/0 [ 114.288059][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 114.288068][ T5338] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.288075][ T5338] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 114.288083][ T5338] repair success (rewriting node) [ 114.313011][ T5338] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 114.313027][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 114.313036][ T5338] loop0 node offset 0/32 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.313043][ T5338] loop0 node offset 0/32 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/32 [ 114.313052][ T5338] repair success (rewriting node) [ 114.340413][ T5338] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 114.340428][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 114.340437][ T5338] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.340446][ T5338] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 114.340454][ T5338] repair success (rewriting node) [ 114.366366][ T5338] bcachefs (loop0): btree node read error at btree deleted_inodes level 0/0 [ 114.366381][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 114.366390][ T5338] loop0 node offset 0/8 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 114.366397][ T5338] loop0 node offset 0/8 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/8 [ 114.366405][ T5338] repair success (rewriting node) [ 114.389664][ T5338] bcachefs (loop0): check_topology... done [ 114.393063][ T5338] bcachefs (loop0): accounting_read... done [ 114.397260][ T5338] bcachefs (loop0): alloc_read... done [ 114.400110][ T5338] bcachefs (loop0): snapshots_read... done [ 114.403076][ T5338] bcachefs (loop0): check_allocations... [ 114.407746][ T5338] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 114.407770][ T5338] while marking u64s 7 type extent 3746994889972256771:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 114.424505][ T5338] bcachefs (loop0): bucket 0:34 gen 0 different types of data in same bucket: journal, user [ 114.424519][ T5338] while marking u64s 7 type extent 3746994889972256771:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 114.440083][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.440098][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 114.452217][ T5338] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 114.452232][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 114.464366][ T5338] bcachefs (loop0): bucket 0:27 gen 0 different types of data in same bucket: journal, btree [ 114.464379][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 114.478499][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.478513][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 114.499100][ T5338] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 114.499115][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 114.514084][ T5338] bcachefs (loop0): bucket 0:38 gen 0 different types of data in same bucket: journal, btree [ 114.514098][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 114.528432][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.528446][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 114.539505][ T5338] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 114.539518][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 114.552160][ T5338] bcachefs (loop0): bucket 0:41 gen 0 different types of data in same bucket: journal, btree [ 114.552170][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 114.566165][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.566175][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 114.577324][ T5338] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 114.577337][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 114.588218][ T5338] bcachefs (loop0): bucket 0:35 gen 0 different types of data in same bucket: journal, btree [ 114.588233][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 114.600469][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.600482][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 114.611687][ T5338] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 114.611701][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 114.622385][ T5338] bcachefs (loop0): bucket 0:32 gen 0 different types of data in same bucket: journal, btree [ 114.622393][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 114.635390][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.635404][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 114.647529][ T5338] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 114.647538][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 114.659169][ T5338] bcachefs (loop0): bucket 0:28 gen 0 different types of data in same bucket: journal, btree [ 114.659183][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 114.672100][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.672115][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 114.682702][ T5338] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 114.682715][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 114.695157][ T5338] bcachefs (loop0): bucket 0:29 gen 0 different types of data in same bucket: journal, btree [ 114.695167][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 114.707307][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.707322][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 114.717786][ T5338] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 114.717796][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 114.728984][ T5338] bcachefs (loop0): bucket 0:37 gen 0 different types of data in same bucket: journal, btree [ 114.728998][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 114.741015][ T5338] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 114.741025][ T5338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 114.750888][ T5338] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 114.750898][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 114.761777][ T5338] bcachefs (loop0): bucket 0:42 gen 0 different types of data in same bucket: journal, btree [ 114.761791][ T5338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 114.786159][ T5338] done [ 114.788343][ T5338] bcachefs (loop0): going read-write [ 114.928279][ T13] bcachefs (loop0): u64s 13 type alloc_v4 0:25:0 len 0 ver 0: [ 114.928301][ T13] gen 0 oldest_gen 0 data_type journal [ 114.928305][ T13] journal_seq_nonempty 0 [ 114.928308][ T13] journal_seq_empty 0 [ 114.928311][ T13] need_discard 0 [ 114.928316][ T13] need_inc_gen 0 [ 114.928320][ T13] dirty_sectors 256 [ 114.928325][ T13] stripe_sectors 0 [ 114.928329][ T13] cached_sectors 0 [ 114.928334][ T13] stripe 0 [ 114.928338][ T13] stripe_redundancy 0 [ 114.928343][ T13] io_time[READ] 0 [ 114.928349][ T13] io_time[WRITE] 0 [ 114.928354][ T13] fragmentation 0 [ 114.928360][ T13] bp_start 8 [ 114.928365][ T13] [ 114.928370][ T13] incorrectly set at freespace:0:25:0 (free 0, genbits 0 should be 0), fixing [ 114.934313][ T5338] bcachefs (loop0): journal_replay... [ 114.969159][ T13] bcachefs (loop0): u64s 13 type alloc_v4 0:30:0 len 0 ver 0: [ 114.969173][ T13] gen 0 oldest_gen 0 data_type journal [ 114.969179][ T13] journal_seq_nonempty 0 [ 114.969184][ T13] journal_seq_empty 0 [ 114.969188][ T13] need_discard 0 [ 114.969191][ T13] need_inc_gen 0 [ 114.969194][ T13] dirty_sectors 256 [ 114.969198][ T13] stripe_sectors 0 [ 114.969201][ T13] cached_sectors 0 [ 114.969204][ T13] stripe 0 [ 114.969207][ T13] stripe_redundancy 0 [ 114.969211][ T13] io_time[READ] 0 [ 114.969214][ T13] io_time[WRITE] 0 [ 114.969217][ T13] fragmentation 0 [ 114.969221][ T13] bp_start 8 [ 114.969224][ T13] [ 114.969227][ T13] incorrectly set at freespace:0:30:0 (free 0, genbits 0 should be 0), fixing [ 115.009322][ T13] ================================================================== [ 115.012710][ T13] BUG: KASAN: slab-use-after-free in bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.016331][ T13] Read of size 8 at addr ffff88803ff35d20 by task kworker/u4:1/13 [ 115.019644][ T13] [ 115.020640][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 115.020651][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.020659][ T13] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 115.020680][ T13] Call Trace: [ 115.020687][ T13] [ 115.020693][ T13] dump_stack_lvl+0x189/0x250 [ 115.020710][ T13] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.020720][ T13] ? rcu_is_watching+0x15/0xb0 [ 115.020733][ T13] ? __kasan_check_byte+0x12/0x40 [ 115.020743][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.020757][ T13] ? rcu_is_watching+0x15/0xb0 [ 115.020769][ T13] ? lock_release+0x4b/0x3e0 [ 115.020783][ T13] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.020792][ T13] ? __virt_addr_valid+0x4a5/0x5c0 [ 115.020802][ T13] print_report+0xd2/0x2b0 [ 115.020815][ T13] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.020827][ T13] kasan_report+0x118/0x150 [ 115.020837][ T13] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.020851][ T13] bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.020868][ T13] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 115.020883][ T13] ? __pfx_bch2_bucket_alloc_trans+0x10/0x10 [ 115.020904][ T13] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 115.020918][ T13] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 115.020932][ T13] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 115.020946][ T13] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 115.020959][ T13] ? __open_bucket_add_buckets+0x783/0x1e40 [ 115.020974][ T13] __open_bucket_add_buckets+0x1437/0x1e40 [ 115.020992][ T13] open_bucket_add_buckets+0x2ee/0x440 [ 115.021007][ T13] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 115.021020][ T13] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 115.021082][ T13] bch2_btree_reserve_get+0x641/0x1810 [ 115.021102][ T13] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 115.021109][ T13] ? __pfx_bch2_btree_reserve_get+0x10/0x10 [ 115.021121][ T13] ? __pfx___bch2_disk_reservation_add+0x10/0x10 [ 115.021133][ T13] ? bch2_btree_update_start+0xadb/0x1dc0 [ 115.021147][ T13] bch2_btree_update_start+0x147e/0x1dc0 [ 115.021159][ T13] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 115.021181][ T13] ? bch2_btree_node_rewrite+0x17e/0x1120 [ 115.021195][ T13] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 115.021212][ T13] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 115.021226][ T13] ? async_btree_node_rewrite_work+0x1e1/0x840 [ 115.021240][ T13] ? bch2_btree_iter_peek_node+0x566/0xbe0 [ 115.021249][ T13] ? bch2_btree_iter_verify+0x1d/0x360 [ 115.021259][ T13] bch2_btree_node_rewrite+0x17e/0x1120 [ 115.021277][ T13] async_btree_node_rewrite_work+0x370/0x840 [ 115.021293][ T13] ? __pfx_async_btree_node_rewrite_work+0x10/0x10 [ 115.021309][ T13] ? async_btree_node_rewrite_work+0x1d2/0x840 [ 115.021323][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.021334][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 115.021348][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 115.021361][ T13] process_scheduled_works+0xae1/0x17b0 [ 115.021381][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.021397][ T13] worker_thread+0x8a0/0xda0 [ 115.021416][ T13] kthread+0x70e/0x8a0 [ 115.021427][ T13] ? __pfx_worker_thread+0x10/0x10 [ 115.021440][ T13] ? __pfx_kthread+0x10/0x10 [ 115.021450][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.021461][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.021475][ T13] ? __pfx_kthread+0x10/0x10 [ 115.021483][ T13] ret_from_fork+0x3fc/0x770 [ 115.021497][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 115.021509][ T13] ? __pfx_kthread+0x10/0x10 [ 115.021517][ T13] ret_from_fork_asm+0x1a/0x30 [ 115.021530][ T13] [ 115.021533][ T13] [ 115.164413][ T13] Allocated by task 13: [ 115.166148][ T13] kasan_save_track+0x3e/0x80 [ 115.168020][ T13] __kasan_kmalloc+0x93/0xb0 [ 115.170149][ T13] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 115.172733][ T13] krealloc_noprof+0x124/0x340 [ 115.174627][ T13] __bch2_trans_kmalloc+0x26c/0xc80 [ 115.176762][ T13] bch2_alloc_sectors_start_trans+0x1d59/0x1e80 [ 115.179266][ T13] bch2_btree_reserve_get+0x641/0x1810 [ 115.181381][ T13] bch2_btree_update_start+0x147e/0x1dc0 [ 115.183670][ T13] bch2_btree_node_rewrite+0x17e/0x1120 [ 115.185877][ T13] async_btree_node_rewrite_work+0x370/0x840 [ 115.188299][ T13] process_scheduled_works+0xae1/0x17b0 [ 115.190676][ T13] worker_thread+0x8a0/0xda0 [ 115.192630][ T13] kthread+0x70e/0x8a0 [ 115.194259][ T13] ret_from_fork+0x3fc/0x770 [ 115.196144][ T13] ret_from_fork_asm+0x1a/0x30 [ 115.198097][ T13] [ 115.199106][ T13] Freed by task 13: [ 115.200866][ T13] kasan_save_track+0x3e/0x80 [ 115.202762][ T13] kasan_save_free_info+0x46/0x50 [ 115.204893][ T13] __kasan_slab_free+0x62/0x70 [ 115.206853][ T13] kfree+0x18e/0x440 [ 115.208522][ T13] krealloc_noprof+0x1cd/0x340 [ 115.210542][ T13] __bch2_trans_kmalloc+0x26c/0xc80 [ 115.212660][ T13] __bch2_trans_subbuf_alloc+0x2da/0x460 [ 115.214972][ T13] bch2_trans_log_str+0xd5/0x3c0 [ 115.216814][ T13] __bch2_fsck_err+0xc11/0xfb0 [ 115.218748][ T13] bch2_check_discard_freespace_key+0x71b/0xce0 [ 115.221243][ T13] bch2_bucket_alloc_trans+0x1333/0x2410 [ 115.223455][ T13] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 115.225845][ T13] __open_bucket_add_buckets+0x1437/0x1e40 [ 115.228129][ T13] open_bucket_add_buckets+0x2ee/0x440 [ 115.230236][ T13] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 115.232975][ T13] bch2_btree_reserve_get+0x641/0x1810 [ 115.235315][ T13] bch2_btree_update_start+0x147e/0x1dc0 [ 115.237704][ T13] bch2_btree_node_rewrite+0x17e/0x1120 [ 115.240083][ T13] async_btree_node_rewrite_work+0x370/0x840 [ 115.242609][ T13] process_scheduled_works+0xae1/0x17b0 [ 115.244934][ T13] worker_thread+0x8a0/0xda0 [ 115.246922][ T13] kthread+0x70e/0x8a0 [ 115.248703][ T13] ret_from_fork+0x3fc/0x770 [ 115.250599][ T13] ret_from_fork_asm+0x1a/0x30 [ 115.252575][ T13] [ 115.253490][ T13] The buggy address belongs to the object at ffff88803ff35c00 [ 115.253490][ T13] which belongs to the cache kmalloc-512 of size 512 [ 115.258958][ T13] The buggy address is located 288 bytes inside of [ 115.258958][ T13] freed 512-byte region [ffff88803ff35c00, ffff88803ff35e00) [ 115.264581][ T13] [ 115.265655][ T13] The buggy address belongs to the physical page: [ 115.268436][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ff34 [ 115.272174][ T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.275682][ T13] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 115.278611][ T13] page_type: f5(slab) [ 115.280373][ T13] raw: 04fff00000000040 ffff88801a441c80 ffffea0000ffdc00 0000000000000004 [ 115.283848][ T13] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 115.287393][ T13] head: 04fff00000000040 ffff88801a441c80 ffffea0000ffdc00 0000000000000004 [ 115.291048][ T13] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 115.294530][ T13] head: 04fff00000000001 ffffea0000ffcd01 00000000ffffffff 00000000ffffffff [ 115.298021][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 115.301631][ T13] page dumped because: kasan: bad access detected [ 115.304134][ T13] page_owner tracks the page as allocated [ 115.306454][ T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5317, tgid 5317 (syz-executor), ts 109325007082, free_ts 28750811000 [ 115.315233][ T13] post_alloc_hook+0x240/0x2a0 [ 115.317187][ T13] get_page_from_freelist+0x21e4/0x22c0 [ 115.319448][ T13] __alloc_frozen_pages_noprof+0x181/0x370 [ 115.321920][ T13] alloc_pages_mpol+0x232/0x4a0 [ 115.324080][ T13] allocate_slab+0x8a/0x3b0 [ 115.326024][ T13] ___slab_alloc+0xbfc/0x1480 [ 115.327951][ T13] __kmalloc_cache_noprof+0x296/0x3d0 [ 115.330477][ T13] __ipv6_dev_mc_inc+0x420/0xaf0 [ 115.332315][ T13] ipv6_add_dev+0xe63/0x1370 [ 115.334159][ T13] addrconf_notify+0x794/0x1010 [ 115.336232][ T13] notifier_call_chain+0x1b3/0x3e0 [ 115.338303][ T13] register_netdevice+0x1608/0x1ae0 [ 115.340607][ T13] __ip_tunnel_create+0x3e7/0x560 [ 115.342814][ T13] ip_tunnel_init_net+0x2ba/0x800 [ 115.345000][ T13] ops_init+0x35c/0x5c0 [ 115.346812][ T13] setup_net+0x219/0x4b0 [ 115.348687][ T13] page last free pid 4720 tgid 4720 stack trace: [ 115.351536][ T13] __free_frozen_pages+0xc71/0xe70 [ 115.353779][ T13] __put_partials+0x161/0x1c0 [ 115.355943][ T13] put_cpu_partial+0x17c/0x250 [ 115.358145][ T13] __slab_free+0x2f7/0x400 [ 115.360196][ T13] qlist_free_all+0x97/0x140 [ 115.362316][ T13] kasan_quarantine_reduce+0x148/0x160 [ 115.364784][ T13] __kasan_slab_alloc+0x22/0x80 [ 115.366970][ T13] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 115.369367][ T13] getname_flags+0xb8/0x540 [ 115.371354][ T13] do_sys_openat2+0xbc/0x1c0 [ 115.373383][ T13] __x64_sys_openat+0x138/0x170 [ 115.375488][ T13] do_syscall_64+0xfa/0x3b0 [ 115.377469][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.380112][ T13] [ 115.381217][ T13] Memory state around the buggy address: [ 115.383655][ T13] ffff88803ff35c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.387052][ T13] ffff88803ff35c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.390475][ T13] >ffff88803ff35d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.393497][ T13] ^ [ 115.395547][ T13] ffff88803ff35d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 115.398752][ T13] ffff88803ff35e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.401942][ T13] ================================================================== [ 115.415035][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.418318][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 115.423628][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.428425][ T13] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 115.431815][ T13] Call Trace: [ 115.433357][ T13] [ 115.434714][ T13] dump_stack_lvl+0x99/0x250 [ 115.437693][ T13] ? __asan_memcpy+0x40/0x70 [ 115.439873][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.442126][ T13] ? __pfx__printk+0x10/0x10 [ 115.444126][ T13] panic+0x2db/0x790 [ 115.445839][ T13] ? __pfx_panic+0x10/0x10 [ 115.447729][ T13] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 115.450289][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.452991][ T13] ? print_memory_metadata+0x314/0x400 [ 115.455333][ T13] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.457902][ T13] check_panic_on_warn+0x89/0xb0 [ 115.460085][ T13] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.462612][ T13] end_report+0x78/0x160 [ 115.464455][ T13] kasan_report+0x129/0x150 [ 115.466344][ T13] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.468849][ T13] bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 115.471414][ T13] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 115.473983][ T13] ? __pfx_bch2_bucket_alloc_trans+0x10/0x10 [ 115.476623][ T13] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 115.479113][ T13] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 115.481873][ T13] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 115.484457][ T13] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 115.487117][ T13] ? __open_bucket_add_buckets+0x783/0x1e40 [ 115.489835][ T13] __open_bucket_add_buckets+0x1437/0x1e40 [ 115.492427][ T13] open_bucket_add_buckets+0x2ee/0x440 [ 115.494847][ T13] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 115.497389][ T13] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 115.499696][ T13] bch2_btree_reserve_get+0x641/0x1810 [ 115.501934][ T13] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 115.504364][ T13] ? __pfx_bch2_btree_reserve_get+0x10/0x10 [ 115.506843][ T13] ? __pfx___bch2_disk_reservation_add+0x10/0x10 [ 115.509495][ T13] ? bch2_btree_update_start+0xadb/0x1dc0 [ 115.511992][ T13] bch2_btree_update_start+0x147e/0x1dc0 [ 115.514542][ T13] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 115.517356][ T13] ? bch2_btree_node_rewrite+0x17e/0x1120 [ 115.519979][ T13] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 115.522684][ T13] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 115.525445][ T13] ? async_btree_node_rewrite_work+0x1e1/0x840 [ 115.528268][ T13] ? bch2_btree_iter_peek_node+0x566/0xbe0 [ 115.530923][ T13] ? bch2_btree_iter_verify+0x1d/0x360 [ 115.533435][ T13] bch2_btree_node_rewrite+0x17e/0x1120 [ 115.535923][ T13] async_btree_node_rewrite_work+0x370/0x840 [ 115.538626][ T13] ? __pfx_async_btree_node_rewrite_work+0x10/0x10 [ 115.541566][ T13] ? async_btree_node_rewrite_work+0x1d2/0x840 [ 115.544327][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.546704][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 115.549326][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 115.551927][ T13] process_scheduled_works+0xae1/0x17b0 [ 115.554422][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.557101][ T13] worker_thread+0x8a0/0xda0 [ 115.559212][ T13] kthread+0x70e/0x8a0 [ 115.561064][ T13] ? __pfx_worker_thread+0x10/0x10 [ 115.563342][ T13] ? __pfx_kthread+0x10/0x10 [ 115.565435][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.567781][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.570115][ T13] ? __pfx_kthread+0x10/0x10 [ 115.572178][ T13] ret_from_fork+0x3fc/0x770 [ 115.574203][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 115.576455][ T13] ? __pfx_kthread+0x10/0x10 [ 115.578421][ T13] ret_from_fork_asm+0x1a/0x30 [ 115.580648][ T13] [ 115.582359][ T13] Kernel Offset: disabled [ 115.584301][ T13] Rebooting in 86400 seconds..