program: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f636f775f656e61626c65642c6469726563745f696f2c6a6f75726e616c5f747261b637c393becc2fca5f6e616d65732c726561645f6f6e6c792c00"], 0x5, 0x5d91, &(0x7f000000bb80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000003, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r1, 0x10, 0x2, 0x7fff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) (fail_nth: 1) [ 70.028559][ T5088] Bluetooth: hci0: command tx timeout [ 71.629945][ T5103] loop0: detected capacity change from 0 to 32768 [ 72.007036][ T5103] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 72.022615][ T5103] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 72.032520][ T5103] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 72.032520][ T5103] running recovery passes: check_allocations [ 72.055630][ T5088] Bluetooth: hci0: command tx timeout [ 72.062266][ T5103] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 72.062288][ T5103] gen 0 oldest_gen 0 data_type journal [ 72.062296][ T5103] journal_seq 1 [ 72.062303][ T5103] need_discard 1 [ 72.062308][ T5103] need_inc_gen 1 [ 72.062315][ T5103] dirty_sectors 256 [ 72.062320][ T5103] stripe_sectors 0 [ 72.062326][ T5103] cached_sectors 0 [ 72.062332][ T5103] stripe 67108864 [ 72.062338][ T5103] stripe_redundancy 0 [ 72.062344][ T5103] io_time[READ] 1 [ 72.062349][ T5103] io_time[WRITE] 1 [ 72.062355][ T5103] fragmentation 0 [ 72.062360][ T5103] bp_start 8 [ 72.062366][ T5103] [ 72.062372][ T5103] invalid data type (got 2 should be 7): delete?, fixing [ 72.132454][ T5103] bcachefs (loop0): accounting_read... done [ 72.151549][ T5103] bcachefs (loop0): alloc_read... done [ 72.153534][ T5103] bcachefs (loop0): stripes_read... done [ 72.156299][ T5103] bcachefs (loop0): snapshots_read... done [ 72.158841][ T5103] bcachefs (loop0): check_allocations... [ 72.167208][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.167229][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 72.195458][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.195469][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 72.217886][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.217901][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 72.236059][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.236073][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 72.256072][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.256088][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 72.275895][ T5103] btree ptr not marked in member info btree allocated bitmap [ 72.275942][ T5103] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 72.296512][ T5103] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 1032, should be 8, fixing [ 72.300674][ T5103] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 72.303348][ T5103] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 72.320044][ T5103] done [ 72.333304][ T5103] bcachefs (loop0): going read-write [ 72.338329][ T5103] bcachefs (loop0): journal_replay... done [ 72.384960][ T5103] bcachefs (loop0): resume_logged_ops... done [ 72.387252][ T5103] bcachefs (loop0): delete_dead_inodes... done [ 72.396030][ T5103] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 72.399116][ T5103] bcachefs (loop0): resume_logged_ops... done [ 72.411679][ T5103] bcachefs (loop0): delete_dead_inodes... done [ 72.416777][ T5103] bcachefs (loop0): done starting filesystem [ 72.439626][ T24] audit: type=1800 audit(1727034325.704:2): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1073741824 res=0 errno=0 [ 72.475574][ T24] audit: type=1800 audit(1727034325.734:3): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1073741824 res=0 errno=0 [ 72.483206][ T24] audit: type=1800 audit(1727034325.744:4): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1073741824 res=0 errno=0 [ 72.526852][ T5103] ================================================================== [ 72.529865][ T5103] BUG: KASAN: slab-use-after-free in bch2_direct_write+0x2a70/0x3160 [ 72.532943][ T5103] Read of size 8 at addr ffff88804e2e50a0 by task syz.0.0/5103 [ 72.535712][ T5103] [ 72.536671][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 72.540333][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.544035][ T5103] Call Trace: [ 72.545253][ T5103] [ 72.546288][ T5103] dump_stack_lvl+0x241/0x360 [ 72.547995][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.549724][ T5103] ? __pfx__printk+0x10/0x10 [ 72.551335][ T5103] ? _printk+0xd5/0x120 [ 72.552805][ T5103] ? __virt_addr_valid+0x183/0x530 [ 72.554654][ T5103] ? __virt_addr_valid+0x183/0x530 [ 72.556537][ T5103] print_report+0x169/0x550 [ 72.558243][ T5103] ? __virt_addr_valid+0x183/0x530 [ 72.560118][ T5103] ? __virt_addr_valid+0x183/0x530 [ 72.561951][ T5103] ? __virt_addr_valid+0x45f/0x530 [ 72.563783][ T5103] ? __phys_addr+0xba/0x170 [ 72.565555][ T5103] ? bch2_direct_write+0x2a70/0x3160 [ 72.567519][ T5103] kasan_report+0x143/0x180 [ 72.569237][ T5103] ? bch2_direct_write+0x2a70/0x3160 [ 72.571139][ T5103] bch2_direct_write+0x2a70/0x3160 [ 72.573028][ T5103] ? __pfx_bch2_direct_write+0x10/0x10 [ 72.575064][ T5103] ? mark_lock+0x9a/0x360 [ 72.576722][ T5103] bch2_write_iter+0x194/0x2480 [ 72.578478][ T5103] ? __lock_acquire+0x1384/0x2050 [ 72.580390][ T5103] ? __pfx_lock_acquire+0x10/0x10 [ 72.582272][ T5103] ? __pfx_bch2_write_iter+0x10/0x10 [ 72.584224][ T5103] ? rcu_read_lock_any_held+0xb7/0x160 [ 72.586273][ T5103] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 72.588450][ T5103] vfs_write+0xa6d/0xc90 [ 72.590096][ T5103] ? __pfx_bch2_write_iter+0x10/0x10 [ 72.592001][ T5103] ? __pfx_vfs_write+0x10/0x10 [ 72.593667][ T5103] ? __fdget_pos+0x24e/0x320 [ 72.595334][ T5103] ksys_write+0x1a0/0x2c0 [ 72.596929][ T5103] ? __pfx_ksys_write+0x10/0x10 [ 72.598671][ T5103] ? do_syscall_64+0x100/0x230 [ 72.600396][ T5103] ? do_syscall_64+0xb6/0x230 [ 72.602021][ T5103] do_syscall_64+0xf3/0x230 [ 72.603532][ T5103] ? clear_bhb_loop+0x35/0x90 [ 72.605371][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.607538][ T5103] RIP: 0033:0x7f2ae6f7def9 [ 72.609184][ T5103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.616083][ T5103] RSP: 002b:00007f2ae7df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.619134][ T5103] RAX: ffffffffffffffda RBX: 00007f2ae7135f80 RCX: 00007f2ae6f7def9 [ 72.621942][ T5103] RDX: 00000000ffffffd7 RSI: 0000000020000000 RDI: 0000000000000006 [ 72.624925][ T5103] RBP: 00007f2ae7df7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.628345][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.631097][ T5103] R13: 0000000000000000 R14: 00007f2ae7135f80 R15: 00007ffd02728c38 [ 72.634107][ T5103] [ 72.635263][ T5103] [ 72.636136][ T5103] Allocated by task 5103: [ 72.637706][ T5103] kasan_save_track+0x3f/0x80 [ 72.639452][ T5103] __kasan_mempool_unpoison_object+0x9e/0x160 [ 72.641626][ T5103] remove_element+0x129/0x1a0 [ 72.643373][ T5103] mempool_alloc_noprof+0x54e/0x5a0 [ 72.645410][ T5103] bio_alloc_bioset+0x26f/0x1130 [ 72.647194][ T5103] bch2_direct_write+0x5a3/0x3160 [ 72.649065][ T5103] bch2_write_iter+0x194/0x2480 [ 72.650841][ T5103] vfs_write+0xa6d/0xc90 [ 72.652392][ T5103] ksys_write+0x1a0/0x2c0 [ 72.654118][ T5103] do_syscall_64+0xf3/0x230 [ 72.655817][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.657925][ T5103] [ 72.658838][ T5103] Freed by task 5103: [ 72.660262][ T5103] kasan_save_track+0x3f/0x80 [ 72.661907][ T5103] kasan_save_free_info+0x40/0x50 [ 72.663731][ T5103] __kasan_mempool_poison_object+0xaa/0x120 [ 72.665894][ T5103] mempool_free+0x1c8/0x390 [ 72.667560][ T5103] bch2_direct_write+0x2a59/0x3160 [ 72.669493][ T5103] bch2_write_iter+0x194/0x2480 [ 72.671253][ T5103] vfs_write+0xa6d/0xc90 [ 72.672739][ T5103] ksys_write+0x1a0/0x2c0 [ 72.674255][ T5103] do_syscall_64+0xf3/0x230 [ 72.675860][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.677859][ T5103] [ 72.678764][ T5103] The buggy address belongs to the object at ffff88804e2e4fc0 [ 72.678764][ T5103] which belongs to the cache bio-119 of size 1192 [ 72.683686][ T5103] The buggy address is located 224 bytes inside of [ 72.683686][ T5103] freed 1192-byte region [ffff88804e2e4fc0, ffff88804e2e5468) [ 72.688636][ T5103] [ 72.689565][ T5103] The buggy address belongs to the physical page: [ 72.691877][ T5103] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e2e4 [ 72.695070][ T5103] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 72.698291][ T5103] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 72.701099][ T5103] page_type: f5(slab) [ 72.702530][ T5103] raw: 04fff00000000040 ffff88804e212000 dead000000000122 0000000000000000 [ 72.705549][ T5103] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 72.708720][ T5103] head: 04fff00000000040 ffff88804e212000 dead000000000122 0000000000000000 [ 72.711749][ T5103] head: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000 [ 72.714814][ T5103] head: 04fff00000000002 ffffea000138b901 ffffffffffffffff 0000000000000000 [ 72.718014][ T5103] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 72.721163][ T5103] page dumped because: kasan: bad access detected [ 72.723506][ T5103] page_owner tracks the page as allocated [ 72.725504][ T5103] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5103, tgid 5102 (syz.0.0), ts 71973998768, free_ts 0 [ 72.732850][ T5103] post_alloc_hook+0x1f3/0x230 [ 72.734593][ T5103] get_page_from_freelist+0x3045/0x3190 [ 72.736601][ T5103] __alloc_pages_noprof+0x256/0x6c0 [ 72.738505][ T5103] alloc_pages_mpol_noprof+0x3e8/0x680 [ 72.740596][ T5103] alloc_slab_page+0x6a/0x120 [ 72.742402][ T5103] allocate_slab+0x5a/0x2f0 [ 72.744106][ T5103] ___slab_alloc+0xcd1/0x14b0 [ 72.745954][ T5103] __slab_alloc+0x58/0xa0 [ 72.747632][ T5103] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 72.749664][ T5103] mempool_init_node+0x1ee/0x4e0 [ 72.751577][ T5103] mempool_init_noprof+0x3a/0x50 [ 72.753484][ T5103] bioset_init+0x2e8/0x820 [ 72.755138][ T5103] bch2_fs_fs_io_direct_init+0x67/0x90 [ 72.757166][ T5103] bch2_fs_alloc+0x1eab/0x20b0 [ 72.758911][ T5103] bch2_fs_open+0x8cc/0xdf0 [ 72.760565][ T5103] bch2_fs_get_tree+0x731/0x1700 [ 72.762275][ T5103] page_owner free stack trace missing [ 72.764353][ T5103] [ 72.765266][ T5103] Memory state around the buggy address: [ 72.767411][ T5103] ffff88804e2e4f80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 72.770509][ T5103] ffff88804e2e5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.773360][ T5103] >ffff88804e2e5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.776276][ T5103] ^ [ 72.778145][ T5103] ffff88804e2e5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.781023][ T5103] ffff88804e2e5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.783862][ T5103] ================================================================== [ 73.085220][ T5103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.088424][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 73.092286][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.096506][ T5103] Call Trace: [ 73.097851][ T5103] [ 73.098906][ T5103] dump_stack_lvl+0x241/0x360 [ 73.100983][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.103157][ T5103] ? __pfx__printk+0x10/0x10 [ 73.104893][ T5103] ? preempt_schedule+0xe1/0xf0 [ 73.106665][ T5103] ? vscnprintf+0x5d/0x90 [ 73.108183][ T5103] panic+0x349/0x880 [ 73.109618][ T5103] ? check_panic_on_warn+0x21/0xb0 [ 73.111572][ T5103] ? __pfx_panic+0x10/0x10 [ 73.113265][ T5103] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 73.115477][ T5103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.117934][ T5103] ? print_report+0x502/0x550 [ 73.119720][ T5103] check_panic_on_warn+0x86/0xb0 [ 73.121506][ T5103] ? bch2_direct_write+0x2a70/0x3160 [ 73.123533][ T5103] end_report+0x77/0x160 [ 73.125030][ T5103] kasan_report+0x154/0x180 [ 73.126708][ T5103] ? bch2_direct_write+0x2a70/0x3160 [ 73.128617][ T5103] bch2_direct_write+0x2a70/0x3160 [ 73.130304][ T5103] ? __pfx_bch2_direct_write+0x10/0x10 [ 73.132184][ T5103] ? mark_lock+0x9a/0x360 [ 73.133707][ T5103] bch2_write_iter+0x194/0x2480 [ 73.135582][ T5103] ? __lock_acquire+0x1384/0x2050 [ 73.137424][ T5103] ? __pfx_lock_acquire+0x10/0x10 [ 73.139222][ T5103] ? __pfx_bch2_write_iter+0x10/0x10 [ 73.141176][ T5103] ? rcu_read_lock_any_held+0xb7/0x160 [ 73.143122][ T5103] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 73.145270][ T5103] vfs_write+0xa6d/0xc90 [ 73.146822][ T5103] ? __pfx_bch2_write_iter+0x10/0x10 [ 73.148658][ T5103] ? __pfx_vfs_write+0x10/0x10 [ 73.150389][ T5103] ? __fdget_pos+0x24e/0x320 [ 73.151931][ T5103] ksys_write+0x1a0/0x2c0 [ 73.153328][ T5103] ? __pfx_ksys_write+0x10/0x10 [ 73.155009][ T5103] ? do_syscall_64+0x100/0x230 [ 73.156639][ T5103] ? do_syscall_64+0xb6/0x230 [ 73.158308][ T5103] do_syscall_64+0xf3/0x230 [ 73.159861][ T5103] ? clear_bhb_loop+0x35/0x90 [ 73.161621][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.163739][ T5103] RIP: 0033:0x7f2ae6f7def9 [ 73.165353][ T5103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.172445][ T5103] RSP: 002b:00007f2ae7df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.175422][ T5103] RAX: ffffffffffffffda RBX: 00007f2ae7135f80 RCX: 00007f2ae6f7def9 [ 73.178271][ T5103] RDX: 00000000ffffffd7 RSI: 0000000020000000 RDI: 0000000000000006 [ 73.181232][ T5103] RBP: 00007f2ae7df7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.184035][ T5103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.186846][ T5103] R13: 0000000000000000 R14: 00007f2ae7135f80 R15: 00007ffd02728c38 [ 73.189757][ T5103] [ 73.191193][ T5103] Kernel Offset: disabled [ 73.192813][ T5103] Rebooting in 86400 seconds..