program: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0801ad05434f6b48002757f25a4698d35947200001"], 0x114}], 0x1}, 0x240880c0) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="bbd4351f20e2732dd106f01e60bbbbbbbbbbaaaaaaaaaaaa86dd606410a600001600fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result}], 0x1c) init_module(&(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4600000000fc7eca361f6700000000000000000100000000000000000024b2a95475000000000000000000000000000000000000000000000000000000534ad38b00"], 0xffcd4, &(0x7f0000000080)='[[-\'^%{\x00') write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) poll(&(0x7f0000000180)=[{r0, 0x2}, {r0, 0x210}, {r2, 0xd0}], 0x3, 0x774) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r7 = userfaultfd(0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x7, &(0x7f0000007f00)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000007f80)={0x0, 0x0, 0x8, 0x0, 0x0, r7, 0x0}]) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x8003, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000a40), &(0x7f0000000140)=@udp, 0x2}, 0x20) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="01c58a29f27b52b10fbe51e336685b2a474536118e5bc71002b481d6101d66b5a356893fc4a91aa54da1523de604f7575e165140a7fa7b0d2d1e2b17ab9ee64638", @ANYRES16=r5, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x1) close_range(r0, r0, 0x2) r10 = syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file2\x00', 0x8000, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x81, 0x5bfd, &(0x7f000000b780)="$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") pwritev2(r10, 0x0, 0x0, 0x3, 0x7, 0x1b) [ 83.618880][ T5094] Bluetooth: hci0: command tx timeout [ 84.730164][ T5111] Invalid ELF header type: 0 != 1 [ 84.751673][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.0'. [ 85.085667][ T5112] loop0: detected capacity change from 0 to 32768 [ 85.342096][ T5112] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 85.348352][ T5112] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 85.352604][ T5112] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix [ 85.352604][ T5112] running recovery passes: check_allocations [ 85.370207][ T5112] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 85.370207][ T5112] rw journal devs: loop0 [ 85.389160][ T5112] invalid bkey u64s 11 type alloc_v4 0:3:0 len 0 ver 0: [ 85.389185][ T5112] gen 0 oldest_gen 0 data_type sb [ 85.389195][ T5112] journal_seq 1 [ 85.389203][ T5112] need_discard 1 [ 85.389210][ T5112] need_inc_gen 1 [ 85.389218][ T5112] dirty_sectors 256 [ 85.389225][ T5112] stripe_sectors 4 [ 85.389233][ T5112] cached_sectors 0 [ 85.389241][ T5112] stripe 0 [ 85.389248][ T5112] stripe_redundancy 0 [ 85.389256][ T5112] io_time[READ] 1 [ 85.389265][ T5112] io_time[WRITE] 1 [ 85.389272][ T5112] fragmentation 1769481 [ 85.389279][ T5112] bp_start 8 [ 85.389286][ T5112] [ 85.389293][ T5112] bad val size (315 > 6): delete?, fixing [ 85.438314][ T5112] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 8 [ 85.442380][ T5112] bcachefs (loop0): flagging btree freespace lost data [ 85.457943][ T5112] error reading btree root freespace l=0: btree_node_read_error, shutting down [ 85.462102][ T5112] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 85.465478][ T5112] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 85.470613][ T5112] bcachefs (loop0): shutting down [ 85.491684][ T5112] bcachefs (loop0): shutdown complete [ 85.496405][ T1034] ================================================================== [ 85.499707][ T1034] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 85.502758][ T1034] Read of size 8 at addr ffff88804bd4e0b0 by task kworker/u4:8/1034 [ 85.506387][ T1034] [ 85.507725][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/u4:8 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 85.512215][ T1034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.516429][ T1034] Workqueue: loop0 loop_rootcg_workfn [ 85.518955][ T1034] Call Trace: [ 85.520593][ T1034] [ 85.522016][ T1034] dump_stack_lvl+0x241/0x360 [ 85.524149][ T1034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.526043][ T1034] ? __pfx__printk+0x10/0x10 [ 85.527812][ T1034] ? _printk+0xd5/0x120 [ 85.529363][ T1034] ? __virt_addr_valid+0x183/0x530 [ 85.531373][ T1034] ? __virt_addr_valid+0x183/0x530 [ 85.533541][ T1034] print_report+0x169/0x550 [ 85.535512][ T1034] ? __virt_addr_valid+0x183/0x530 [ 85.537782][ T1034] ? __virt_addr_valid+0x183/0x530 [ 85.539954][ T1034] ? __virt_addr_valid+0x45f/0x530 [ 85.541987][ T1034] ? __phys_addr+0xba/0x170 [ 85.543839][ T1034] ? percpu_ref_put+0xda/0x250 [ 85.545804][ T1034] kasan_report+0x143/0x180 [ 85.547836][ T1034] ? percpu_ref_put+0xda/0x250 [ 85.550157][ T1034] ? percpu_ref_put+0x1f/0x250 [ 85.552392][ T1034] percpu_ref_put+0xda/0x250 [ 85.554294][ T1034] blk_update_request+0x5e5/0x1160 [ 85.556145][ T1034] blk_mq_end_request+0x3e/0x70 [ 85.557980][ T1034] loop_process_work+0x1c10/0x2170 [ 85.559927][ T1034] ? __pfx_loop_process_work+0x10/0x10 [ 85.562196][ T1034] ? register_lock_class+0x102/0x980 [ 85.565254][ T1034] ? try_to_wake_up+0x92e/0x1480 [ 85.567932][ T1034] ? __pfx_register_lock_class+0x10/0x10 [ 85.570425][ T1034] ? mark_lock+0x9a/0x360 [ 85.572008][ T1034] ? __pfx_lock_acquire+0x10/0x10 [ 85.573948][ T1034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 85.576244][ T1034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.578757][ T1034] ? process_scheduled_works+0x976/0x1850 [ 85.580977][ T1034] process_scheduled_works+0xa63/0x1850 [ 85.583268][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.585981][ T1034] ? assign_work+0x364/0x3d0 [ 85.588370][ T1034] worker_thread+0x870/0xd30 [ 85.590676][ T1034] ? __kthread_parkme+0x169/0x1d0 [ 85.592714][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 85.594768][ T1034] kthread+0x2f0/0x390 [ 85.596384][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 85.598430][ T1034] ? __pfx_kthread+0x10/0x10 [ 85.600374][ T1034] ret_from_fork+0x4b/0x80 [ 85.602218][ T1034] ? __pfx_kthread+0x10/0x10 [ 85.604280][ T1034] ret_from_fork_asm+0x1a/0x30 [ 85.606489][ T1034] [ 85.607868][ T1034] [ 85.608889][ T1034] Allocated by task 5112: [ 85.610464][ T1034] kasan_save_track+0x3f/0x80 [ 85.612162][ T1034] __kasan_kmalloc+0x98/0xb0 [ 85.613887][ T1034] __kmalloc_cache_noprof+0x19c/0x2c0 [ 85.615882][ T1034] __bch2_dev_alloc+0x57/0xa60 [ 85.617910][ T1034] bch2_dev_alloc+0xd4/0x170 [ 85.619950][ T1034] bch2_fs_open+0x2e3f/0x2f80 [ 85.621945][ T1034] bch2_fs_get_tree+0x738/0x1710 [ 85.623979][ T1034] vfs_get_tree+0x90/0x2b0 [ 85.625850][ T1034] do_new_mount+0x2be/0xb40 [ 85.627729][ T1034] __se_sys_mount+0x2d6/0x3c0 [ 85.629659][ T1034] do_syscall_64+0xf3/0x230 [ 85.631714][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.634857][ T1034] [ 85.636120][ T1034] Freed by task 5112: [ 85.637911][ T1034] kasan_save_track+0x3f/0x80 [ 85.639922][ T1034] kasan_save_free_info+0x40/0x50 [ 85.641937][ T1034] __kasan_slab_free+0x59/0x70 [ 85.643862][ T1034] kfree+0x1a0/0x440 [ 85.645473][ T1034] kobject_put+0x22f/0x480 [ 85.647272][ T1034] bch2_fs_free+0x27b/0x3c0 [ 85.649109][ T1034] bch2_fs_get_tree+0xd9f/0x1710 [ 85.651139][ T1034] vfs_get_tree+0x90/0x2b0 [ 85.653132][ T1034] do_new_mount+0x2be/0xb40 [ 85.655271][ T1034] __se_sys_mount+0x2d6/0x3c0 [ 85.657618][ T1034] do_syscall_64+0xf3/0x230 [ 85.659574][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.662009][ T1034] [ 85.662931][ T1034] The buggy address belongs to the object at ffff88804bd4e000 [ 85.662931][ T1034] which belongs to the cache kmalloc-4k of size 4096 [ 85.669103][ T1034] The buggy address is located 176 bytes inside of [ 85.669103][ T1034] freed 4096-byte region [ffff88804bd4e000, ffff88804bd4f000) [ 85.675216][ T1034] [ 85.676159][ T1034] The buggy address belongs to the physical page: [ 85.678658][ T1034] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4bd48 [ 85.682235][ T1034] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.686661][ T1034] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 85.690346][ T1034] page_type: f5(slab) [ 85.691921][ T1034] raw: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 85.695295][ T1034] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 85.698737][ T1034] head: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 85.702252][ T1034] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 85.707365][ T1034] head: 04fff00000000003 ffffea00012f5201 ffffffffffffffff 0000000000000000 [ 85.711207][ T1034] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 85.714484][ T1034] page dumped because: kasan: bad access detected [ 85.717187][ T1034] page_owner tracks the page as allocated [ 85.719729][ T1034] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5109, tgid 5109 (kworker/0:5), ts 85209263212, free_ts 84741593599 [ 85.728371][ T1034] post_alloc_hook+0x1f3/0x230 [ 85.730484][ T1034] get_page_from_freelist+0x3045/0x3190 [ 85.732760][ T1034] __alloc_pages_noprof+0x256/0x6c0 [ 85.734754][ T1034] alloc_pages_mpol_noprof+0x3e8/0x680 [ 85.736884][ T1034] alloc_slab_page+0x6a/0x120 [ 85.739458][ T1034] allocate_slab+0x5a/0x2f0 [ 85.742157][ T1034] ___slab_alloc+0xcd1/0x14b0 [ 85.744294][ T1034] __slab_alloc+0x58/0xa0 [ 85.746056][ T1034] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 85.748784][ T1034] kmalloc_reserve+0x111/0x2a0 [ 85.750831][ T1034] __alloc_skb+0x1f3/0x440 [ 85.752770][ T1034] nsim_dev_trap_report_work+0x254/0xaa0 [ 85.755115][ T1034] process_scheduled_works+0xa63/0x1850 [ 85.757398][ T1034] worker_thread+0x870/0xd30 [ 85.759294][ T1034] kthread+0x2f0/0x390 [ 85.760926][ T1034] ret_from_fork+0x4b/0x80 [ 85.762642][ T1034] page last free pid 5111 tgid 5110 stack trace: [ 85.765029][ T1034] free_unref_page+0xcfb/0xf20 [ 85.766996][ T1034] vfree+0x186/0x2e0 [ 85.768882][ T1034] load_module+0x15da/0x3880 [ 85.771936][ T1034] __se_sys_init_module+0x24f/0x310 [ 85.775032][ T1034] do_syscall_64+0xf3/0x230 [ 85.777201][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.779418][ T1034] [ 85.780352][ T1034] Memory state around the buggy address: [ 85.782545][ T1034] ffff88804bd4df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.785624][ T1034] ffff88804bd4e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.788819][ T1034] >ffff88804bd4e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.792035][ T1034] ^ [ 85.794478][ T1034] ffff88804bd4e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.798345][ T1034] ffff88804bd4e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.802022][ T1034] ================================================================== [ 85.924140][ T5094] Bluetooth: hci0: command tx timeout [ 86.156727][ T1034] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.159690][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/u4:8 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 86.166145][ T1034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.170398][ T1034] Workqueue: loop0 loop_rootcg_workfn [ 86.172473][ T1034] Call Trace: [ 86.173780][ T1034] [ 86.174930][ T1034] dump_stack_lvl+0x241/0x360 [ 86.176871][ T1034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.178961][ T1034] ? __pfx__printk+0x10/0x10 [ 86.181084][ T1034] ? preempt_schedule+0xe1/0xf0 [ 86.183733][ T1034] ? vscnprintf+0x5d/0x90 [ 86.185963][ T1034] panic+0x349/0x880 [ 86.188082][ T1034] ? check_panic_on_warn+0x21/0xb0 [ 86.190181][ T1034] ? __pfx_panic+0x10/0x10 [ 86.191914][ T1034] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 86.194180][ T1034] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.196687][ T1034] ? print_report+0x502/0x550 [ 86.198514][ T1034] check_panic_on_warn+0x86/0xb0 [ 86.200639][ T1034] ? percpu_ref_put+0xda/0x250 [ 86.202942][ T1034] end_report+0x77/0x160 [ 86.205009][ T1034] kasan_report+0x154/0x180 [ 86.207410][ T1034] ? percpu_ref_put+0xda/0x250 [ 86.209543][ T1034] ? percpu_ref_put+0x1f/0x250 [ 86.211401][ T1034] percpu_ref_put+0xda/0x250 [ 86.213178][ T1034] blk_update_request+0x5e5/0x1160 [ 86.215178][ T1034] blk_mq_end_request+0x3e/0x70 [ 86.217138][ T1034] loop_process_work+0x1c10/0x2170 [ 86.219105][ T1034] ? __pfx_loop_process_work+0x10/0x10 [ 86.221561][ T1034] ? register_lock_class+0x102/0x980 [ 86.224478][ T1034] ? try_to_wake_up+0x92e/0x1480 [ 86.227096][ T1034] ? __pfx_register_lock_class+0x10/0x10 [ 86.229628][ T1034] ? mark_lock+0x9a/0x360 [ 86.231598][ T1034] ? __pfx_lock_acquire+0x10/0x10 [ 86.233653][ T1034] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.236010][ T1034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.238400][ T1034] ? process_scheduled_works+0x976/0x1850 [ 86.240651][ T1034] process_scheduled_works+0xa63/0x1850 [ 86.242781][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.245122][ T1034] ? assign_work+0x364/0x3d0 [ 86.246981][ T1034] worker_thread+0x870/0xd30 [ 86.248835][ T1034] ? __kthread_parkme+0x169/0x1d0 [ 86.250887][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 86.253014][ T1034] kthread+0x2f0/0x390 [ 86.254540][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 86.256529][ T1034] ? __pfx_kthread+0x10/0x10 [ 86.258350][ T1034] ret_from_fork+0x4b/0x80 [ 86.260144][ T1034] ? __pfx_kthread+0x10/0x10 [ 86.261951][ T1034] ret_from_fork_asm+0x1a/0x30 [ 86.263831][ T1034] [ 86.265344][ T1034] Kernel Offset: disabled [ 86.266990][ T1034] Rebooting in 86400 seconds..