program: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40044103, &(0x7f0000000400)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r7, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0xba01}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003240)={&(0x7f0000002c40)={0x5d4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc102}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd0d}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r11 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)={[{@journal_flush_disabled}, {@grpquota}, {@ratelimit_errors}, {@wide_macs}, {@errors_continue}, {@erasure_code}, {@nocow}, {@reconstruct_alloc}, {@degraded}], [{@flag='nolazytime'}]}, 0x3, 0x59c1, &(0x7f0000005b80)="$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") r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x4c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000200)='./file0\x00', r14, r15) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r17 = getegid() statx(r11, &(0x7f0000000080)='./file1\x00', 0x2000, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000001c0)=[r15, r16, r17, r18]) [ 58.808910][ T5322] loop0: detected capacity change from 0 to 32768 [ 58.889291][ T5322] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,wide_macs,grpquota,degraded,journal_flush_disabled,nojournal_transaction_names,reconstruct_alloc,nocow [ 58.899728][ T5322] invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 58.907258][ T5322] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 58.910945][ T5322] bcachefs (loop0): Version upgrade required: [ 58.910945][ T5322] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 58.910945][ T5322] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 58.910945][ T5322] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 58.939158][ T5322] bcachefs (loop0): dropping and reconstructing all alloc info [ 58.946414][ T5322] bcachefs (loop0): error validating btree node at btree extents level 0/0 [ 58.946432][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 58.946442][ T5322] node offset 8/16 bset u64s 49 bset byte offset 288: bad k->u64s 0 (min 3 max 253), fixing [ 58.960091][ T5322] bcachefs (loop0): error validating btree node at btree extents level 0/0 [ 58.960106][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 58.960115][ T5322] node offset 8/16 bset u64s 47 bset byte offset 352: key extends past end of bset, fixing [ 58.974424][ T5322] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 58.974424][ T5322] btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 58.985369][ T5322] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: (unpack error) [ 58.985385][ T5322] invalid variable length fields: delete?, fixing [ 58.993774][ T5307] Bluetooth: hci0: command tx timeout [ 58.998827][ T5322] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 58.998841][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 58.998851][ T5322] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 59.013014][ T5322] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 59.013014][ T5322] btree=xattrs level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 59.024020][ T5322] bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0 [ 59.024044][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 0:12884901888:0 durability: 1 ptr: 0:32:0 gen 0 [ 59.024054][ T5322] node offset 0/16: incorrect min_key: got POS_MIN should be 0:12884901888:0 [ 59.038162][ T5322] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 59.043074][ T5322] bcachefs (loop0): flagging btree snapshots lost data [ 59.045820][ T5322] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 59.053747][ T5322] error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 59.058307][ T5322] bcachefs (loop0): error validating btree node on loop0 at btree deleted_inodes level 0/0 [ 59.058320][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 65535 min_key R POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 59.058337][ T5322] node offset 8/65535: btree node data missing: expected 65535 sectors, found 8, fixing [ 59.071418][ T5322] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 59.071418][ T5322] btree=deleted_inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 65535 min_key R POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 59.083336][ T5322] bcachefs (loop0): scan_for_btree_nodes... [ 59.094022][ T5322] bcachefs (loop0): btree node scan found 6 nodes after overwrites [ 59.098971][ T5322] done [ 59.100756][ T5322] bcachefs (loop0): check_topology... [ 59.102869][ T5322] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 59.108113][ T5322] no nodes found for btree snapshots, continuing [ 59.110562][ T5322] done [ 59.114198][ T5322] bcachefs (loop0): accounting_read... done [ 59.117252][ T5322] bcachefs (loop0): alloc_read... done [ 59.119284][ T5322] bcachefs (loop0): stripes_read... done [ 59.121414][ T5322] bcachefs (loop0): snapshots_read... [ 59.122854][ T5322] bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7) [ 59.129444][ T5322] done [ 59.130496][ T5322] bcachefs (loop0): check_allocations... done [ 59.147393][ T5322] bcachefs (loop0): going read-write [ 59.156618][ T5322] bcachefs (loop0): journal_replay... done [ 59.217119][ T5322] bcachefs (loop0): check_alloc_info... done [ 59.234213][ T5322] bcachefs (loop0): check_lrus... done [ 59.236657][ T5322] bcachefs (loop0): check_btree_backpointers... done [ 59.239970][ T5322] bcachefs (loop0): check_backpointers_to_extents... done [ 59.245381][ T5322] bcachefs (loop0): check_extents_to_backpointers... [ 59.246138][ T5322] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets [ 59.253563][ T5322] done [ 59.255651][ T5322] bcachefs (loop0): check_alloc_to_lru_refs... done [ 59.260783][ T5322] bcachefs (loop0): bucket_gens_init... done [ 59.264905][ T5322] bcachefs (loop0): reconstruct_snapshots... [ 59.265369][ T5322] snapshot node 4294967295 from tree 4294967295 missing, recreating [ 59.285153][ T5322] done [ 59.287753][ T5322] bcachefs (loop0): check_snapshot_trees... done [ 59.291205][ T5322] bcachefs (loop0): check_snapshots... done [ 59.296440][ T5322] bcachefs (loop0): check_subvols... [ 59.297192][ T5322] subvolume 1 is not set as snapshot but is not master subvolume, fixing [ 59.303334][ T5322] done [ 59.305388][ T5322] bcachefs (loop0): check_subvol_children... done [ 59.308494][ T5322] bcachefs (loop0): delete_dead_snapshots... done [ 59.311373][ T5322] bcachefs (loop0): check_inodes... done [ 59.316108][ T5322] bcachefs (loop0): check_extents... done [ 59.319410][ T5322] bcachefs (loop0): check_indirect_extents... done [ 59.322882][ T5322] bcachefs (loop0): check_dirents... [ 59.323721][ T5322] dirent points to missing inode: [ 59.323732][ T5322] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 59.331486][ T5322] done [ 59.335375][ T5322] bcachefs (loop0): check_xattrs... done [ 59.337870][ T5322] bcachefs (loop0): check_root... done [ 59.340697][ T5322] bcachefs (loop0): check_unreachable_inodes... done [ 59.344120][ T5322] bcachefs (loop0): check_subvolume_structure... done [ 59.347050][ T5322] bcachefs (loop0): check_directory_structure... done [ 59.351126][ T5322] bcachefs (loop0): check_nlinks... done [ 59.355295][ T5322] bcachefs (loop0): resume_logged_ops... done [ 59.357634][ T5322] bcachefs (loop0): delete_dead_inodes... done [ 59.366632][ T5322] bcachefs (loop0): set_fs_needs_rebalance... done [ 59.380828][ T5322] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 59.384376][ T5322] bcachefs (loop0): check_alloc_info... done [ 59.390100][ T5322] bcachefs (loop0): check_lrus... done [ 59.397169][ T5322] bcachefs (loop0): check_btree_backpointers... done [ 59.400210][ T5322] bcachefs (loop0): check_backpointers_to_extents... done [ 59.404860][ T5322] bcachefs (loop0): check_extents_to_backpointers... done [ 59.408294][ T5322] bcachefs (loop0): check_alloc_to_lru_refs... done [ 59.411538][ T5322] bcachefs (loop0): bucket_gens_init... done [ 59.415933][ T5322] bcachefs (loop0): reconstruct_snapshots... done [ 59.418771][ T5322] bcachefs (loop0): check_snapshot_trees... done [ 59.421219][ T5322] bcachefs (loop0): check_snapshots... done [ 59.424121][ T5322] bcachefs (loop0): check_subvols... done [ 59.426372][ T5322] bcachefs (loop0): check_subvol_children... done [ 59.428952][ T5322] bcachefs (loop0): delete_dead_snapshots... done [ 59.431308][ T5322] bcachefs (loop0): check_inodes... done [ 59.434663][ T5322] bcachefs (loop0): check_extents... done [ 59.437144][ T5322] bcachefs (loop0): check_indirect_extents... done [ 59.439812][ T5322] bcachefs (loop0): check_dirents... done [ 59.443637][ T5322] bcachefs (loop0): check_xattrs... done [ 59.445856][ T5322] bcachefs (loop0): check_root... done [ 59.448133][ T5322] bcachefs (loop0): check_unreachable_inodes... done [ 59.450918][ T5322] bcachefs (loop0): check_subvolume_structure... done [ 59.454809][ T5322] bcachefs (loop0): check_directory_structure... done [ 59.457476][ T5322] bcachefs (loop0): check_nlinks... done [ 59.460000][ T5322] bcachefs (loop0): resume_logged_ops... done [ 59.462966][ T5322] bcachefs (loop0): delete_dead_inodes... done [ 59.465464][ T5322] bcachefs (loop0): set_fs_needs_rebalance... done [ 59.468745][ T5322] bcachefs (loop0): reading quotas [ 59.471126][ T5322] bcachefs (loop0): quotas done [ 59.479224][ T5322] bcachefs (loop0): done starting filesystem [ 59.486079][ T39] bucket 0:34 gen 1 (mem gen 0) data type user: stale dirty ptr (gen 0) [ 59.486102][ T39] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, , continuing [ 59.497066][ T39] bucket 0:34 gen 1 (mem gen 0) data type user: stale dirty ptr (gen 0) [ 59.497079][ T39] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, , continuing [ 59.508437][ T39] bucket 0:34 gen 1 (mem gen 0) data type user: stale dirty ptr (gen 0) [ 59.508458][ T39] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, , continuing [ 59.519884][ T39] bucket 0:34 gen 1 (mem gen 0) data type user: stale dirty ptr (gen 0) [ 59.519899][ T39] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, , continuing [ 59.666680][ T5323] ------------[ cut here ]------------ [ 59.668911][ T5323] kernel BUG at fs/bcachefs/quota.c:319! [ 59.682588][ T5323] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 59.685361][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 59.689539][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.693632][ T5323] RIP: 0010:bch2_quota_transfer+0xad0/0xae0 [ 59.695857][ T5323] Code: 48 c7 c7 b0 8a 17 8f 4c 89 e6 e8 ab 9f b3 00 e9 c1 fd ff ff e8 71 23 47 fd 90 0f 0b e8 69 23 47 fd 90 0f 0b e8 61 23 47 fd 90 <0f> 0b e8 59 23 47 fd 90 0f 0b e8 f1 3f 8e 07 90 90 90 90 90 90 90 [ 59.703032][ T5323] RSP: 0018:ffffc9000d44f640 EFLAGS: 00010283 [ 59.705724][ T5323] RAX: ffffffff847abd1f RBX: ffff8880522684a0 RCX: 0000000000100000 [ 59.708772][ T5323] RDX: ffffc9000ef83000 RSI: 0000000000002d3d RDI: 0000000000002d3e [ 59.711733][ T5323] RBP: ffffc9000d44f7e8 R08: ffffffff847ab9e8 R09: 0000000000000001 [ 59.714738][ T5323] R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 0000000000000001 [ 59.717782][ T5323] R13: 0000000000000000 R14: 1ffff1100875b385 R15: ffff888043ad9c28 [ 59.720827][ T5323] FS: 00007f7307d176c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 59.724325][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.726887][ T5323] CR2: 00007f7307d16fe0 CR3: 0000000040056000 CR4: 0000000000352ef0 [ 59.730078][ T5323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.733115][ T5323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.736324][ T5323] Call Trace: [ 59.737706][ T5323] [ 59.738916][ T5323] ? __die_body+0x5f/0xb0 [ 59.740600][ T5323] ? die+0x9e/0xc0 [ 59.742072][ T5323] ? do_trap+0x15a/0x3a0 [ 59.743666][ T5323] ? bch2_quota_transfer+0xad0/0xae0 [ 59.745730][ T5323] ? do_error_trap+0x1dc/0x2c0 [ 59.747663][ T5323] ? bch2_quota_transfer+0xad0/0xae0 [ 59.749775][ T5323] ? __pfx_do_error_trap+0x10/0x10 [ 59.751757][ T5323] ? report_bug+0x3e8/0x500 [ 59.753592][ T5323] ? handle_invalid_op+0x34/0x40 [ 59.755551][ T5323] ? bch2_quota_transfer+0xad0/0xae0 [ 59.757594][ T5323] ? exc_invalid_op+0x38/0x50 [ 59.759380][ T5323] ? asm_exc_invalid_op+0x1a/0x20 [ 59.761341][ T5323] ? bch2_quota_transfer+0x798/0xae0 [ 59.763359][ T5323] ? bch2_quota_transfer+0xacf/0xae0 [ 59.765313][ T5323] ? bch2_quota_transfer+0xad0/0xae0 [ 59.767174][ T5323] ? __pfx_bch2_quota_transfer+0x10/0x10 [ 59.769368][ T5323] ? rcu_is_watching+0x15/0xb0 [ 59.771068][ T5323] ? __mutex_lock+0x397/0x1010 [ 59.772825][ T5323] ? rcu_is_watching+0x15/0xb0 [ 59.774652][ T5323] ? lock_release+0xbf/0xa30 [ 59.776473][ T5323] ? __pfx___mutex_lock+0x10/0x10 [ 59.778416][ T5323] bch2_fs_quota_transfer+0x282/0x4d0 [ 59.780475][ T5323] bch2_setattr_nonsize+0x3c1/0x12a0 [ 59.782559][ T5323] ? bch2_trans_put+0x89e/0x1020 [ 59.784840][ T5323] ? rcu_is_watching+0x15/0xb0 [ 59.786689][ T5323] ? bch2_trans_put+0x89e/0x1020 [ 59.788651][ T5323] ? kfree+0x4e/0x430 [ 59.790223][ T5323] ? bch2_trans_put+0xa50/0x1020 [ 59.792124][ T5323] ? aa_get_newest_label+0xff/0x6f0 [ 59.794099][ T5323] ? __pfx_bch2_setattr_nonsize+0x10/0x10 [ 59.796151][ T5323] ? __pfx_from_kgid+0x10/0x10 [ 59.797955][ T5323] ? setattr_prepare+0x1f5/0xb20 [ 59.799908][ T5323] ? bch2_setattr+0x183/0x220 [ 59.801803][ T5323] ? __pfx_bch2_setattr+0x10/0x10 [ 59.803748][ T5323] notify_change+0xbca/0xe90 [ 59.805517][ T5323] chown_common+0x501/0x850 [ 59.807254][ T5323] ? __pfx_chown_common+0x10/0x10 [ 59.809250][ T5323] ? rcu_read_lock_any_held+0xb7/0x160 [ 59.811328][ T5323] ? mnt_get_write_access+0x226/0x2b0 [ 59.813357][ T5323] do_fchownat+0x16a/0x240 [ 59.815104][ T5323] ? __pfx_do_fchownat+0x10/0x10 [ 59.817010][ T5323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.819362][ T5323] ? do_syscall_64+0x100/0x230 [ 59.821271][ T5323] __x64_sys_lchown+0x85/0xa0 [ 59.823054][ T5323] do_syscall_64+0xf3/0x230 [ 59.824775][ T5323] ? clear_bhb_loop+0x35/0x90 [ 59.826535][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.828856][ T5323] RIP: 0033:0x7f7306f8d169 [ 59.830505][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.837669][ T5323] RSP: 002b:00007f7307d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 59.840922][ T5323] RAX: ffffffffffffffda RBX: 00007f73071a6080 RCX: 00007f7306f8d169 [ 59.843910][ T5323] RDX: 0000000039323420 RSI: 00000000706d6174 RDI: 0000200000000200 [ 59.846830][ T5323] RBP: 00007f730700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 59.849789][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.852712][ T5323] R13: 0000000000000000 R14: 00007f73071a6080 R15: 00007ffdaf08e0a8 [ 59.855662][ T5323] [ 59.856835][ T5323] Modules linked in: [ 59.858746][ T5323] ---[ end trace 0000000000000000 ]--- [ 60.107700][ T5322] syz.0.0 (5322): drop_caches: 2 [ 60.109676][ T5323] RIP: 0010:bch2_quota_transfer+0xad0/0xae0 [ 60.119474][ T5323] Code: 48 c7 c7 b0 8a 17 8f 4c 89 e6 e8 ab 9f b3 00 e9 c1 fd ff ff e8 71 23 47 fd 90 0f 0b e8 69 23 47 fd 90 0f 0b e8 61 23 47 fd 90 <0f> 0b e8 59 23 47 fd 90 0f 0b e8 f1 3f 8e 07 90 90 90 90 90 90 90 [ 60.133448][ T5323] RSP: 0018:ffffc9000d44f640 EFLAGS: 00010283 [ 60.135608][ T5323] RAX: ffffffff847abd1f RBX: ffff8880522684a0 RCX: 0000000000100000 [ 60.138775][ T5323] RDX: ffffc9000ef83000 RSI: 0000000000002d3d RDI: 0000000000002d3e [ 60.142150][ T5323] RBP: ffffc9000d44f7e8 R08: ffffffff847ab9e8 R09: 0000000000000001 [ 60.145147][ T5323] R10: dffffc0000000000 R11: fffffbfff2079f6f R12: 0000000000000001 [ 60.148145][ T5323] R13: 0000000000000000 R14: 1ffff1100875b385 R15: ffff888043ad9c28 [ 60.151078][ T5323] FS: 00007f7307d176c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 60.155271][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.157787][ T5323] CR2: 00007f73033f4fe0 CR3: 0000000040056000 CR4: 0000000000352ef0 [ 60.160841][ T5323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.164300][ T5323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.167332][ T5323] Kernel panic - not syncing: Fatal exception [ 60.169881][ T5323] Kernel Offset: disabled [ 60.171501][ T5323] Rebooting in 86400 seconds..