program: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x68, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) tee(r4, r4, 0x7ff, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x1d, r3}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)={0x2, 0x40, 0x8, {}, {r6, r7/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "3707742926af5fac"}}, 0x48}, 0x1, 0x0, 0x0, 0x2004c000}, 0x20008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000740)=ANY=[], 0x1, 0x5912, &(0x7f00000008c0)="$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") r9 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"}) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0x15, 0x17, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ee68d347f41be5a08", [0xf22, 0x7]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000020100000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000a001000000020000600103000024d5ad9e98e8ec8da1c5a4dd87cabcae9912e881f11e976640b6f2766a0d383ca8b1e7c5c1c70cbab55dfc8f1eb6db08eec38ed2d7c2198e0000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x1400c821}, 0xc080) [ 75.777490][ T4675] Bluetooth: hci0: command tx timeout [ 76.336355][ T5335] loop0: detected capacity change from 0 to 32768 [ 76.366339][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.369007][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.601078][ T5335] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 76.607009][ T5335] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.610145][ T5335] bcachefs (loop0): Version upgrade required: [ 76.610145][ T5335] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 76.610145][ T5335] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 76.610145][ T5335] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 76.652101][ T5335] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 76.652126][ T5335] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 76.652137][ T5335] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, shutting down [ 76.667481][ T5335] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10 [ 76.671104][ T5335] bcachefs (loop0): flagging btree alloc lost data [ 76.676850][ T5335] error reading btree root alloc l=0: btree_node_read_error, shutting down [ 76.680246][ T5335] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 76.683137][ T5335] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 76.686634][ T5335] bcachefs (loop0): shutting down [ 76.700923][ T5335] bcachefs (loop0): shutdown complete [ 76.707283][ T1027] ================================================================== [ 76.710196][ T1027] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 76.713023][ T1027] Read of size 8 at addr ffff888041d6a0b0 by task kworker/u4:5/1027 [ 76.715819][ T1027] [ 76.716664][ T1027] CPU: 0 UID: 0 PID: 1027 Comm: kworker/u4:5 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 76.723552][ T1027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.727698][ T1027] Workqueue: loop0 loop_rootcg_workfn [ 76.729768][ T1027] Call Trace: [ 76.730980][ T1027] [ 76.732106][ T1027] dump_stack_lvl+0x241/0x360 [ 76.733896][ T1027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.735779][ T1027] ? __pfx__printk+0x10/0x10 [ 76.737452][ T1027] ? _printk+0xd5/0x120 [ 76.738926][ T1027] ? __virt_addr_valid+0x183/0x530 [ 76.740727][ T1027] ? __virt_addr_valid+0x183/0x530 [ 76.742544][ T1027] print_report+0x169/0x550 [ 76.744210][ T1027] ? __virt_addr_valid+0x183/0x530 [ 76.746012][ T1027] ? __virt_addr_valid+0x183/0x530 [ 76.747847][ T1027] ? __virt_addr_valid+0x45f/0x530 [ 76.749569][ T1027] ? __phys_addr+0xba/0x170 [ 76.751214][ T1027] ? percpu_ref_put+0xda/0x250 [ 76.752997][ T1027] kasan_report+0x143/0x180 [ 76.754648][ T1027] ? percpu_ref_put+0xda/0x250 [ 76.756420][ T1027] ? percpu_ref_put+0x1f/0x250 [ 76.758211][ T1027] percpu_ref_put+0xda/0x250 [ 76.759915][ T1027] blk_update_request+0x5e5/0x1160 [ 76.761809][ T1027] blk_mq_end_request+0x3e/0x70 [ 76.763546][ T1027] loop_process_work+0x1bc8/0x21c0 [ 76.766032][ T1027] ? __pfx_loop_process_work+0x10/0x10 [ 76.768081][ T1027] ? register_lock_class+0x102/0x980 [ 76.770053][ T1027] ? __pfx_register_lock_class+0x10/0x10 [ 76.772025][ T1027] ? mark_lock+0x9a/0x360 [ 76.773541][ T1027] ? debug_object_deactivate+0x2d5/0x390 [ 76.775552][ T1027] ? do_raw_spin_unlock+0x58/0x8b0 [ 76.777395][ T1027] ? __pfx_lock_acquire+0x10/0x10 [ 76.779252][ T1027] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.781411][ T1027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.783693][ T1027] ? process_scheduled_works+0x976/0x1850 [ 76.785799][ T1027] process_scheduled_works+0xa63/0x1850 [ 76.787853][ T1027] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.790053][ T1027] ? assign_work+0x364/0x3d0 [ 76.791636][ T1027] worker_thread+0x870/0xd30 [ 76.793357][ T1027] ? __kthread_parkme+0x169/0x1d0 [ 76.795156][ T1027] ? __pfx_worker_thread+0x10/0x10 [ 76.797015][ T1027] kthread+0x2f0/0x390 [ 76.798589][ T1027] ? __pfx_worker_thread+0x10/0x10 [ 76.800507][ T1027] ? __pfx_kthread+0x10/0x10 [ 76.802225][ T1027] ret_from_fork+0x4b/0x80 [ 76.804031][ T1027] ? __pfx_kthread+0x10/0x10 [ 76.805733][ T1027] ret_from_fork_asm+0x1a/0x30 [ 76.807554][ T1027] [ 76.808735][ T1027] [ 76.809641][ T1027] Allocated by task 5335: [ 76.811311][ T1027] kasan_save_track+0x3f/0x80 [ 76.813102][ T1027] __kasan_kmalloc+0x98/0xb0 [ 76.814881][ T1027] __kmalloc_cache_noprof+0x19c/0x2c0 [ 76.816815][ T1027] __bch2_dev_alloc+0x57/0xa60 [ 76.818691][ T1027] bch2_dev_alloc+0xd4/0x170 [ 76.820248][ T1027] bch2_fs_open+0x2e3f/0x2f80 [ 76.821862][ T1027] bch2_fs_get_tree+0x738/0x1710 [ 76.823507][ T1027] vfs_get_tree+0x90/0x2b0 [ 76.825080][ T1027] do_new_mount+0x2be/0xb40 [ 76.826612][ T1027] __se_sys_mount+0x2d6/0x3c0 [ 76.828174][ T1027] do_syscall_64+0xf3/0x230 [ 76.829754][ T1027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.831823][ T1027] [ 76.832705][ T1027] Freed by task 5335: [ 76.834208][ T1027] kasan_save_track+0x3f/0x80 [ 76.836056][ T1027] kasan_save_free_info+0x40/0x50 [ 76.837946][ T1027] __kasan_slab_free+0x59/0x70 [ 76.839701][ T1027] kfree+0x1a0/0x440 [ 76.841231][ T1027] kobject_put+0x22f/0x480 [ 76.842896][ T1027] bch2_fs_free+0x27b/0x3c0 [ 76.844640][ T1027] bch2_fs_get_tree+0xd9f/0x1710 [ 76.846424][ T1027] vfs_get_tree+0x90/0x2b0 [ 76.848090][ T1027] do_new_mount+0x2be/0xb40 [ 76.849829][ T1027] __se_sys_mount+0x2d6/0x3c0 [ 76.851617][ T1027] do_syscall_64+0xf3/0x230 [ 76.853427][ T1027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.855681][ T1027] [ 76.856623][ T1027] The buggy address belongs to the object at ffff888041d6a000 [ 76.856623][ T1027] which belongs to the cache kmalloc-4k of size 4096 [ 76.861695][ T1027] The buggy address is located 176 bytes inside of [ 76.861695][ T1027] freed 4096-byte region [ffff888041d6a000, ffff888041d6b000) [ 76.866636][ T1027] [ 76.867565][ T1027] The buggy address belongs to the physical page: [ 76.869952][ T1027] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41d68 [ 76.872983][ T1027] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.875964][ T1027] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 76.878770][ T1027] page_type: f5(slab) [ 76.880325][ T1027] raw: 04fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 76.883542][ T1027] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 76.886870][ T1027] head: 04fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122 [ 76.890204][ T1027] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 76.893551][ T1027] head: 04fff00000000003 ffffea0001075a01 ffffffffffffffff 0000000000000000 [ 76.897099][ T1027] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 76.899925][ T1027] page dumped because: kasan: bad access detected [ 76.902235][ T1027] page_owner tracks the page as allocated [ 76.904134][ T1027] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5250, tgid 5250 (dhcpcd-run-hook), ts 51721099295, free_ts 51705856354 [ 76.911060][ T1027] post_alloc_hook+0x1f3/0x230 [ 76.912902][ T1027] get_page_from_freelist+0x3649/0x3790 [ 76.914975][ T1027] __alloc_pages_noprof+0x292/0x710 [ 76.916855][ T1027] alloc_pages_mpol_noprof+0x3e8/0x680 [ 76.918963][ T1027] alloc_slab_page+0x6a/0x140 [ 76.920739][ T1027] allocate_slab+0x5a/0x2f0 [ 76.922543][ T1027] ___slab_alloc+0xcd1/0x14b0 [ 76.924258][ T1027] __slab_alloc+0x58/0xa0 [ 76.925908][ T1027] __kmalloc_noprof+0x25a/0x400 [ 76.927764][ T1027] tomoyo_realpath_from_path+0xcf/0x5e0 [ 76.929787][ T1027] tomoyo_path_perm+0x2b7/0x740 [ 76.931597][ T1027] security_inode_getattr+0x130/0x330 [ 76.933632][ T1027] vfs_getattr+0x2a/0x3b0 [ 76.935260][ T1027] vfs_statx+0x18c/0x490 [ 76.936833][ T1027] vfs_fstatat+0xe5/0x130 [ 76.938476][ T1027] __x64_sys_newfstatat+0x11d/0x1a0 [ 76.940373][ T1027] page last free pid 5251 tgid 5251 stack trace: [ 76.942732][ T1027] free_unref_page+0xdf9/0x1140 [ 76.944561][ T1027] __slab_free+0x31b/0x3d0 [ 76.946284][ T1027] qlist_free_all+0x9a/0x140 [ 76.947957][ T1027] kasan_quarantine_reduce+0x14f/0x170 [ 76.949984][ T1027] __kasan_slab_alloc+0x23/0x80 [ 76.951771][ T1027] kmem_cache_alloc_noprof+0x135/0x2a0 [ 76.953893][ T1027] getname_flags+0xb7/0x540 [ 76.955705][ T1027] do_sys_openat2+0xd2/0x1d0 [ 76.957466][ T1027] __x64_sys_openat+0x247/0x2a0 [ 76.959356][ T1027] do_syscall_64+0xf3/0x230 [ 76.961052][ T1027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.963282][ T1027] [ 76.964219][ T1027] Memory state around the buggy address: [ 76.966294][ T1027] ffff888041d69f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.969172][ T1027] ffff888041d6a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.972124][ T1027] >ffff888041d6a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.975050][ T1027] ^ [ 76.977079][ T1027] ffff888041d6a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.980578][ T1027] ffff888041d6a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.983888][ T1027] ================================================================== [ 77.025507][ T1027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.028383][ T1027] CPU: 0 UID: 0 PID: 1027 Comm: kworker/u4:5 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 77.032491][ T1027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.036508][ T1027] Workqueue: loop0 loop_rootcg_workfn [ 77.038710][ T1027] Call Trace: [ 77.040060][ T1027] [ 77.041283][ T1027] dump_stack_lvl+0x241/0x360 [ 77.043210][ T1027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.045296][ T1027] ? __pfx__printk+0x10/0x10 [ 77.046954][ T1027] ? preempt_schedule+0xe1/0xf0 [ 77.048760][ T1027] ? vscnprintf+0x5d/0x90 [ 77.050469][ T1027] panic+0x349/0x880 [ 77.051987][ T1027] ? check_panic_on_warn+0x21/0xb0 [ 77.053935][ T1027] ? __pfx_panic+0x10/0x10 [ 77.055726][ T1027] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 77.058131][ T1027] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.060674][ T1027] ? print_report+0x502/0x550 [ 77.062519][ T1027] check_panic_on_warn+0x86/0xb0 [ 77.064443][ T1027] ? percpu_ref_put+0xda/0x250 [ 77.066260][ T1027] end_report+0x77/0x160 [ 77.067839][ T1027] kasan_report+0x154/0x180 [ 77.069691][ T1027] ? percpu_ref_put+0xda/0x250 [ 77.071700][ T1027] ? percpu_ref_put+0x1f/0x250 [ 77.073675][ T1027] percpu_ref_put+0xda/0x250 [ 77.075672][ T1027] blk_update_request+0x5e5/0x1160 [ 77.077648][ T1027] blk_mq_end_request+0x3e/0x70 [ 77.079474][ T1027] loop_process_work+0x1bc8/0x21c0 [ 77.081365][ T1027] ? __pfx_loop_process_work+0x10/0x10 [ 77.083329][ T1027] ? register_lock_class+0x102/0x980 [ 77.085345][ T1027] ? __pfx_register_lock_class+0x10/0x10 [ 77.087340][ T1027] ? mark_lock+0x9a/0x360 [ 77.088907][ T1027] ? debug_object_deactivate+0x2d5/0x390 [ 77.090977][ T1027] ? do_raw_spin_unlock+0x58/0x8b0 [ 77.093011][ T1027] ? __pfx_lock_acquire+0x10/0x10 [ 77.095013][ T1027] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.097321][ T1027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.099794][ T1027] ? process_scheduled_works+0x976/0x1850 [ 77.101978][ T1027] process_scheduled_works+0xa63/0x1850 [ 77.104066][ T1027] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.106127][ T1027] ? assign_work+0x364/0x3d0 [ 77.107883][ T1027] worker_thread+0x870/0xd30 [ 77.109729][ T1027] ? __kthread_parkme+0x169/0x1d0 [ 77.111643][ T1027] ? __pfx_worker_thread+0x10/0x10 [ 77.113553][ T1027] kthread+0x2f0/0x390 [ 77.115032][ T1027] ? __pfx_worker_thread+0x10/0x10 [ 77.118007][ T1027] ? __pfx_kthread+0x10/0x10 [ 77.120051][ T1027] ret_from_fork+0x4b/0x80 [ 77.121688][ T1027] ? __pfx_kthread+0x10/0x10 [ 77.123286][ T1027] ret_from_fork_asm+0x1a/0x30 [ 77.125172][ T1027] [ 77.126761][ T1027] Kernel Offset: disabled [ 77.128433][ T1027] Rebooting in 86400 seconds..