program:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000100)={[{@errors_continue}], [{@audit}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'func'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'sync'}}, {@subj_user={'subj_user', 0x3d, 'sync'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'errors=continue'}}]}, 0x1, 0x5962, &(0x7f000000b280)="$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")
mount$cgroup2(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x8004, 0x0)
syz_mount_image$fuse(&(0x7f0000001340), &(0x7f0000001380)='./file0\x00', 0x1a08420, &(0x7f00000013c0)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x9)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
r4 = syz_pidfd_open(r3, 0x0)
process_mrelease(r4, 0x700000000000000)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f00000001c0), 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'perf_event'}]}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, {0xeeee8000, 0x3000, 0x9, 0x4, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0xdddd1000, 0x0, 0x0, 0x80, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfd}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x0, 0xdd00, 0x0, [0x0, 0x0, 0x1]})
ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000100000009500"/32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2200006, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c636f6d7072657373696f6e3d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f636f775f656e61626c65642c736d61636b6673666c6f6f723deb3550803d3eec90ebac6543dc22134b1ad84a53fe0259e8f9ba115fc6ef076407e2f6b846f3e0542c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB="2c6d6561737572652c736d61636b66736465663d2e257d2c61756469742c636f6e746578743d757365725f752c736da8c06b6673726f6f743df32f252c00"], 0x1, 0x5a0e, &(0x7f0000000340)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000000c0)={{r8}, 0x0, 0x0, 0x100000})
[ 76.688916][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.691656][ T4674] Bluetooth: hci0: command tx timeout
[ 76.700139][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.024617][ T5333] loop0: detected capacity change from 0 to 32768
[ 77.036043][ T5333] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be
[ 77.265206][ T5333] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 77.278111][ T5333] bcachefs (loop0): invalid bkey in superblock btree=subvolumes level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key 83886080:0:0 durability: 0 (invalid extent entry 0000000000000000)
[ 77.278133][ T5333] invalid extent entry type (got 7, max 7), deleting
[ 77.291440][ T5333] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 77.294973][ T5333] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags
[ 77.294973][ T5333] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 77.316926][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:11:0 len 0 ver 0:
[ 77.316946][ T5333] gen 0 oldest_gen 0 data_type journal
[ 77.316952][ T5333] journal_seq_nonempty 1
[ 77.316958][ T5333] journal_seq_empty 0
[ 77.316963][ T5333] need_discard 1
[ 77.316968][ T5333] need_inc_gen 1
[ 77.316974][ T5333] dirty_sectors 256
[ 77.316979][ T5333] stripe_sectors 0
[ 77.316985][ T5333] cached_sectors 0
[ 77.316991][ T5333] stripe 59572224
[ 77.316996][ T5333] stripe_redundancy 0
[ 77.317001][ T5333] io_time[READ] 1
[ 77.317007][ T5333] io_time[WRITE] 1
[ 77.317011][ T5333] fragmentation 0
[ 77.317016][ T5333] bp_start 8
[ 77.317020][ T5333]
[ 77.317024][ T5333] invalid data type (got 2 should be 7), deleting
[ 77.353270][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 15 type alloc_v4 0:29:0 len 0 ver 0:
[ 77.353280][ T5333] gen 0 oldest_gen 0 data_type btree
[ 77.353284][ T5333] journal_seq_nonempty 18158513697557839873
[ 77.353288][ T5333] journal_seq_empty 0
[ 77.353291][ T5333] need_discard 0
[ 77.353294][ T5333] need_inc_gen 1
[ 77.353299][ T5333] dirty_sectors 256
[ 77.353303][ T5333] stripe_sectors 0
[ 77.353309][ T5333] cached_sectors 0
[ 77.353314][ T5333] stripe 0
[ 77.353319][ T5333] stripe_redundancy 0
[ 77.353324][ T5333] io_time[READ] 1
[ 77.353330][ T5333] io_time[WRITE] 1
[ 77.353335][ T5333] fragmentation 0
[ 77.353341][ T5333] bp_start 8
[ 77.353346][ T5333]
[ 77.353351][ T5333] invalid backpointers_start, deleting
[ 77.396844][ T5333] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 77.402093][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0
[ 77.402113][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key 4294967295:18446744069414584320:0 durability: 1 ptr: 0:32:0 gen 0
[ 77.402122][ T5333] node offset 0/16: incorrect min_key: got POS_MIN should be 4294967295:18446744069414584320:0, btree topology error:
[ 77.419147][ T5333] bcachefs (loop0): flagging btree snapshots lost data
[ 77.423011][ T5333] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 77.427606][ T5333] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 77.433267][ T5333] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 77.443480][ T5333] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing
[ 77.455097][ T5333] bcachefs (loop0): scan_for_btree_nodes...
[ 77.456611][ T5333] bcachefs (loop0): btree node scan found 3 nodes after overwrites
[ 77.463388][ T5333] done
[ 77.465103][ T5333] bcachefs (loop0): check_topology...
[ 77.466741][ T5333] bcachefs (loop0): btree root snapshots unreadable, must recover from scan
[ 77.473364][ T5333] bcachefs (loop0): no nodes found for btree snapshots, continuing
[ 77.477553][ T5333] done
[ 77.479326][ T5333] bcachefs (loop0): accounting_read... done
[ 77.484332][ T5333] bcachefs (loop0): alloc_read... done
[ 77.486184][ T5333] bcachefs (loop0): snapshots_read...
[ 77.486698][ T5333] bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7)
[ 77.493137][ T5333] done
[ 77.494369][ T5333] bcachefs (loop0): check_allocations...
[ 77.497038][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 77.497050][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 77.511808][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 77.511825][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 77.524797][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 77.524812][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 77.537751][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 77.537768][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 0 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 77.550739][ T5333] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[ 77.550754][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 0 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 77.562396][ T5333] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[ 77.566442][ T5333] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 77.571677][ T5333] bcachefs (loop0): bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing
[ 77.575668][ T5333] bcachefs (loop0): bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 77.582052][ T5333] bcachefs (loop0): bucket 0:32 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[ 77.586491][ T5333] bcachefs (loop0): bucket 0:32 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[ 77.592634][ T5333] bcachefs (loop0): bucket 0:35 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[ 77.596959][ T5333] bcachefs (loop0): bucket 0:35 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[ 77.605841][ T5333] done
[ 77.611550][ T5333] bcachefs (loop0): going read-write
[ 77.629480][ T5333] bcachefs (loop0): journal_replay... done
[ 77.664185][ T5333] bcachefs (loop0): check_lrus... done
[ 77.666827][ T5333] bcachefs (loop0): check_backpointers_to_extents... done
[ 77.671154][ T5333] bcachefs (loop0): check_extents_to_backpointers...
[ 77.672625][ T5333] bcachefs (loop0): scanning for missing backpointers in 2/128 buckets
[ 77.678058][ T5333] done
[ 77.682923][ T5333] bcachefs (loop0): reconstruct_snapshots...
[ 77.683170][ T5333] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating
[ 77.705600][ T5333] done
[ 77.707828][ T5333] bcachefs (loop0): check_inodes...
[ 77.708043][ T5333] bcachefs (loop0): inode 4096:4294967295 bi_subvol points to missing subvolume 1, fixing
[ 77.715086][ T5333] done
[ 77.716866][ T5333] bcachefs (loop0): resume_logged_ops... done
[ 77.719193][ T5333] bcachefs (loop0): delete_dead_inodes... done
[ 77.739219][ T5333] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 77.743705][ T5333] bcachefs (loop0): check_lrus... done
[ 77.746037][ T5333] bcachefs (loop0): check_backpointers_to_extents... done
[ 77.749466][ T5333] bcachefs (loop0): check_extents_to_backpointers...
[ 77.751438][ T5333] bcachefs (loop0): scanning for missing backpointers in 1/128 buckets
[ 77.758306][ T5333] done
[ 77.774746][ T5333] bcachefs (loop0): reconstruct_snapshots... done
[ 77.777405][ T5333] bcachefs (loop0): check_inodes... done
[ 77.779627][ T5333] bcachefs (loop0): resume_logged_ops... done
[ 77.782166][ T5333] bcachefs (loop0): delete_dead_inodes... done
[ 77.787840][ T5333] bcachefs (loop0): done starting filesystem
[ 77.791959][ T5333] bcachefs (loop0): missing subvolume 1
[ 77.791974][ T5333]
[ 77.795012][ T5333] bcachefs (loop0): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_bkey_type_mismatch
[ 77.798768][ T5333] bcachefs (loop0): shutting down
[ 77.800980][ T5333] bcachefs (loop0): going read-only
[ 77.803071][ T5333] bcachefs (loop0): finished waiting for writes to stop
[ 77.806938][ T5333] bcachefs (loop0): flushing journal and stopping allocators, journal seq 22
[ 77.814008][ T5333] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23
[ 77.819157][ T5333] bcachefs (loop0): clean shutdown complete, journal seq 24
[ 77.822642][ T5333] bcachefs (loop0): done going read-only, filesystem not clean
[ 77.844401][ T5333] bcachefs (loop0): shutdown complete
[ 78.377283][ T5333] bcachefs: bch2_fs_get_tree() error: ENOENT_bkey_type_mismatch
[ 78.547786][ T5333] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[ 78.722949][ T5333] loop0: detected capacity change from 0 to 32768
[ 78.726265][ T4674] Bluetooth: hci0: command tx timeout
[ 78.742429][ T5333] bcachefs (/dev/loop0): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.25: extent_flags)
[ 78.880736][ T5333] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[ 78.886724][ T5333] bcachefs (loop0): invalid bkey in superblock btree=alloc level=1: u64s 11 type btree_ptr_v2 2199023255551:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key 9007199254740992:0:0 durability: 1 ptr: 0:26:0 gen 0
[ 78.886741][ T5333] min_key > key, deleting
[ 78.897042][ T5333] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 78.900248][ T5333] bcachefs (loop0): superblock requires following recovery passes to be run:
[ 78.900248][ T5333] snapshots_read,set_may_go_rw
[ 78.905599][ T5333] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags
[ 78.905599][ T5333] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 78.920221][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0
[ 78.920241][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[ 78.920250][ T5333] node offset 8/16 bset u64s 49: checksum error, type crc64_nonzero: got ed89abe6d6e29350 should be 0000000000000000, fixing
[ 78.935477][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0
[ 78.935492][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[ 78.935500][ T5333] node offset 8/16 bset u64s 49: BSET_SEPARATE_WHITEOUTS no longer supported
[ 78.947888][ T5333] bcachefs (loop0): flagging btree extents lost data
[ 78.950460][ T5333] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 78.954737][ T5333] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 78.959067][ T5333] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 78.964122][ T5333] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 78.971663][ T5333] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[ 78.976654][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree inodes level 0/0
[ 78.976666][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0
[ 78.976675][ T5333] node offset 0/24 bset u64s 0: bset version 9 older than superblock version_min 24, fixing
[ 78.995342][ T5333] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 78.995342][ T5333] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0
[ 79.005971][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4278190207:4278190080 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0
[ 79.005987][ T5333] nonzero snapshot, deleting
[ 79.016029][ T5333] bcachefs (loop0): flagging btree snapshots lost data
[ 79.020740][ T5333] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing
[ 79.025747][ T5333] bcachefs (loop0): invalid bkey in btree_node btree=lru level=0: u64s 5 type set 18446462598867058688:34:0 len 3072 ver 0
[ 79.025760][ T5333] size != 0, deleting
[ 79.032383][ T5333] bcachefs (loop0): flagging btree lru lost data
[ 79.034922][ T5333] bcachefs (loop0): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[ 79.041073][ T5333] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[ 79.048009][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree backpointers level 0/0
[ 79.048024][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 79.048033][ T5333] node offset 8/24 bset u64s 42 bset byte offset 96: keys out of order: u64s 9 type backpointer 281436322004992:7077888:0 len 0 ver 0 > u64s 9 type backpointer 62976:7340032:0 len 0 ver 0, fixing
[ 79.065030][ T5333] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 79.065030][ T5333] btree=backpointers level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 79.075862][ T5333] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree deleted_inodes level 0/0
[ 79.075876][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
[ 79.075884][ T5333] node offset 0/8 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 458752 > 4294967295
[ 79.075891][ T5333] u64s 3 fields 64:0, 64:0, 32:458752, 0:0, 0:0, 0:0, btree topology error:
[ 79.092797][ T5333] bcachefs (loop0): flagging btree deleted_inodes lost data
[ 79.097065][ T5333] bcachefs (loop0): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing
[ 79.102964][ T5333] bcachefs (loop0): scan_for_btree_nodes...
[ 79.105364][ T5356] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0
[ 79.105382][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[ 79.105390][ T5356] node offset 8/0 bset u64s 49: BSET_SEPARATE_WHITEOUTS no longer supported
[ 79.127959][ T5356] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree deleted_inodes level 0/0
[ 79.127975][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 0 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
[ 79.127982][ T5356] node offset 0/0 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 458752 > 4294967295
[ 79.127988][ T5356] u64s 3 fields 64:0, 64:0, 32:458752, 0:0, 0:0, 0:0, btree topology error:
[ 79.170873][ T5333] bcachefs (loop0): btree node scan found 1 nodes after overwrites
[ 79.173731][ T5333] done
[ 79.175340][ T5333] bcachefs (loop0): check_topology...
[ 79.176181][ T5333] bcachefs (loop0): btree root extents unreadable, must recover from scan
[ 79.182364][ T5333] bcachefs (loop0): no nodes found for btree extents, continuing
[ 79.186490][ T5333] bcachefs (loop0): btree root snapshots unreadable, must recover from scan
[ 79.190157][ T5333] bcachefs (loop0): no nodes found for btree snapshots, continuing
[ 79.194887][ T5333] bcachefs (loop0): btree root deleted_inodes unreadable, must recover from scan
[ 79.199202][ T5333] bcachefs (loop0): no nodes found for btree deleted_inodes, continuing
[ 79.202379][ T5333] done
[ 79.204905][ T5333] bcachefs (loop0): accounting_read... done
[ 79.208381][ T5333] bcachefs (loop0): alloc_read... done
[ 79.210458][ T5333] bcachefs (loop0): snapshots_read...
[ 79.211024][ T5333] bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7)
[ 79.216985][ T5333] done
[ 79.218583][ T5333] bcachefs (loop0): check_allocations...
[ 79.219294][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 79.219306][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 79.230323][ T5333] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[ 79.230336][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 79.239771][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 79.239783][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 79.248497][ T5333] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[ 79.248506][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 79.258202][ T5333] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[ 79.258242][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[ 79.268055][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 79.268067][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 79.277567][ T5333] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[ 79.277581][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 79.287880][ T5333] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 79.287893][ T5333] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 79.297554][ T5333] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[ 79.297568][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 4398046511104: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 79.307314][ T5333] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[ 79.307326][ T5333] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[ 79.316844][ T5333] bcachefs (loop0): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.320861][ T5333] bcachefs (loop0): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.325052][ T5333] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.328603][ T5333] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.333207][ T5333] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.336964][ T5333] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.341307][ T5333] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.344784][ T5333] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.349127][ T5333] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.352760][ T5333] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.357066][ T5333] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.360997][ T5333] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.365407][ T5333] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.369126][ T5333] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.373188][ T5333] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.376582][ T5333] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.380843][ T5333] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.384700][ T5333] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[ 79.389309][ T5333] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.393366][ T5333] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.397852][ T5333] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.402111][ T5333] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.406738][ T5333] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.410465][ T5333] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.415091][ T5333] bcachefs (loop0): bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.419141][ T5333] bcachefs (loop0): bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.424065][ T5333] bcachefs (loop0): bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.427870][ T5333] bcachefs (loop0): bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.432052][ T5333] bcachefs (loop0): bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.436063][ T5333] bcachefs (loop0): bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.441181][ T5333] bcachefs (loop0): bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.445227][ T5333] bcachefs (loop0): bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.449363][ T5333] bcachefs (loop0): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.453255][ T5333] bcachefs (loop0): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.457693][ T5333] bcachefs (loop0): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.461184][ T5333] bcachefs (loop0): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.465406][ T5333] bcachefs (loop0): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.468733][ T5333] bcachefs (loop0): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.472792][ T5333] bcachefs (loop0): bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.476472][ T5333] bcachefs (loop0): bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.480569][ T5333] bcachefs (loop0): bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.483921][ T5333] bcachefs (loop0): bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.488092][ T5333] bcachefs (loop0): bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.491827][ T5333] bcachefs (loop0): bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.496193][ T5333] bcachefs (loop0): bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.500013][ T5333] bcachefs (loop0): bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.504104][ T5333] bcachefs (loop0): bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.507933][ T5333] bcachefs (loop0): bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.512131][ T5333] bcachefs (loop0): bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing
[ 79.515858][ T5333] bcachefs (loop0): bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.520284][ T5333] bcachefs (loop0): bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.523995][ T5333] bcachefs (loop0): bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.528894][ T5333] bcachefs (loop0): bucket 0:31 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.532947][ T5333] bcachefs (loop0): bucket 0:31 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.537420][ T5333] bcachefs (loop0): bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.541514][ T5333] bcachefs (loop0): bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.545668][ T5333] bcachefs (loop0): bucket 0:37 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.549576][ T5333] bcachefs (loop0): bucket 0:37 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.554333][ T5333] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.558272][ T5333] bcachefs (loop0): bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.563065][ T5333] bcachefs (loop0): bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing
[ 79.567250][ T5333] bcachefs (loop0): bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.572317][ T5333] bcachefs (loop0): bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.576267][ T5333] bcachefs (loop0): bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.580889][ T5333] bcachefs (loop0): bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.584699][ T5333] bcachefs (loop0): bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.589077][ T5333] bcachefs (loop0): bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.592900][ T5333] bcachefs (loop0): bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.597216][ T5333] bcachefs (loop0): bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.601129][ T5333] bcachefs (loop0): bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.605244][ T5333] bcachefs (loop0): bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.608846][ T5333] bcachefs (loop0): bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.613532][ T5333] bcachefs (loop0): bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.618471][ T5333] bcachefs (loop0): bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.624500][ T5333] bcachefs (loop0): bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.630418][ T5333] bcachefs (loop0): bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.636243][ T5333] bcachefs (loop0): bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing
[ 79.641567][ T5333] bcachefs (loop0): bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 79.647583][ T5333] done
[ 79.649459][ T5333] bcachefs (loop0): going read-write
[ 79.652838][ T5333] bcachefs (loop0): journal_replay... done
[ 79.714248][ T5333] bcachefs (loop0): check_alloc_info...
[ 79.715610][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 79.715621][ T5333] device 0 buckets 26-29, fixing
[ 79.723534][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 79.723542][ T5333] device 0 buckets 26-29, fixing
[ 79.729858][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 79.729869][ T5333] device 0 buckets 32-33, fixing
[ 79.734975][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 79.734985][ T5333] device 0 buckets 34-35, fixing
[ 79.740890][ T5333] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 79.740901][ T5333] device 0 buckets 42-43, fixing
[ 79.748003][ T5333] done
[ 79.751889][ T5333] bcachefs (loop0): check_lrus... done
[ 79.754438][ T5333] bcachefs (loop0): check_backpointers_to_extents... done
[ 79.758703][ T5333] bcachefs (loop0): check_extents_to_backpointers...
[ 79.759292][ T5333] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets
[ 79.764816][ T5333] done
[ 79.766995][ T5333] bcachefs (loop0): reconstruct_snapshots...
[ 79.767245][ T5333] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating
[ 79.778733][ T5333] done
[ 79.783788][ T5333] bcachefs (loop0): check_inodes... done
[ 79.787402][ T5333] bcachefs (loop0): resume_logged_ops... done
[ 79.789799][ T5333] bcachefs (loop0): delete_dead_inodes... done
[ 79.798853][ T5333] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 79.802546][ T5333] bcachefs (loop0): check_alloc_info... done
[ 79.807517][ T5333] bcachefs (loop0): check_lrus... done
[ 79.809729][ T5333] bcachefs (loop0): check_backpointers_to_extents... done
[ 79.813277][ T5333] bcachefs (loop0): check_extents_to_backpointers... done
[ 79.816543][ T5333] bcachefs (loop0): reconstruct_snapshots... done
[ 79.819175][ T5333] bcachefs (loop0): check_inodes... done
[ 79.821590][ T5333] bcachefs (loop0): resume_logged_ops... done
[ 79.823914][ T5333] bcachefs (loop0): delete_dead_inodes... done
[ 79.827891][ T5333] bcachefs (loop0): scanning for old btree nodes: min_version 0.9: (unknown version)
[ 79.864224][ T5333] bcachefs (loop0): scanning for old btree nodes done
[ 79.867372][ T5333] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR
[ 79.871269][ T5333] bcachefs (loop0): error starting copygc thread
[ 79.873793][ T5333] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR
[ 79.876999][ T5333] bcachefs (loop0): shutting down
[ 79.878992][ T5333] bcachefs (loop0): going read-only
[ 79.881226][ T5333] bcachefs (loop0): finished waiting for writes to stop
[ 79.883896][ T5333] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23
[ 79.893004][ T5333] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23
[ 79.897827][ T5333] bcachefs (loop0): clean shutdown complete, journal seq 24
[ 79.901278][ T5333] bcachefs (loop0): marking filesystem clean
[ 79.917462][ T5333] bcachefs (loop0): shutdown complete
[ 79.921320][ T1044] ==================================================================
[ 79.924672][ T1044] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250
[ 79.928419][ T1044] Read of size 8 at addr ffff88803689c0b0 by task kworker/u4:9/1044
[ 79.932217][ T1044]
[ 79.933247][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: kworker/u4:9 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full)
[ 79.933262][ T1044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 79.933269][ T1044] Workqueue: loop0 loop_workfn
[ 79.933290][ T1044] Call Trace:
[ 79.933296][ T1044]
[ 79.933302][ T1044] dump_stack_lvl+0x241/0x360
[ 79.933318][ T1044] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.933331][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933344][ T1044] ? rcu_is_watching+0x15/0xb0
[ 79.933356][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933367][ T1044] ? lock_release+0x4e/0x3e0
[ 79.933378][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933390][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933403][ T1044] print_report+0x16e/0x5b0
[ 79.933414][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933426][ T1044] ? __virt_addr_valid+0x183/0x530
[ 79.933437][ T1044] ? __virt_addr_valid+0x45f/0x530
[ 79.933450][ T1044] ? __phys_addr+0xba/0x170
[ 79.933462][ T1044] ? percpu_ref_put+0xda/0x250
[ 79.933476][ T1044] kasan_report+0x143/0x180
[ 79.933486][ T1044] ? percpu_ref_put+0xda/0x250
[ 79.933500][ T1044] ? percpu_ref_put+0x1f/0x250
[ 79.933513][ T1044] percpu_ref_put+0xda/0x250
[ 79.933527][ T1044] blk_update_request+0x5e5/0x1160
[ 79.933542][ T1044] blk_mq_end_request+0x3e/0x70
[ 79.933553][ T1044] loop_process_work+0x1bdf/0x21d0
[ 79.933566][ T1044] ? btree_interior_update_work+0x28ba/0x2990
[ 79.933585][ T1044] ? __pfx_loop_process_work+0x10/0x10
[ 79.933602][ T1044] ? __lock_acquire+0xad5/0xd80
[ 79.933613][ T1044] ? btree_interior_update_work+0x28ba/0x2990
[ 79.933628][ T1044] ? do_raw_spin_lock+0x151/0x370
[ 79.933642][ T1044] ? do_raw_spin_unlock+0x58/0x8b0
[ 79.933655][ T1044] ? look_up_lock_class+0x7b/0x170
[ 79.933717][ T1044] ? register_lock_class+0x54/0x330
[ 79.933727][ T1044] ? __lock_acquire+0xad5/0xd80
[ 79.933742][ T1044] ? process_scheduled_works+0x9cb/0x18e0
[ 79.933752][ T1044] process_scheduled_works+0xac3/0x18e0
[ 79.933768][ T1044] ? __pfx_process_scheduled_works+0x10/0x10
[ 79.933781][ T1044] ? assign_work+0x367/0x3d0
[ 79.933791][ T1044] worker_thread+0x870/0xd50
[ 79.933804][ T1044] ? __kthread_parkme+0x1a8/0x200
[ 79.933816][ T1044] ? __pfx_worker_thread+0x10/0x10
[ 79.933828][ T1044] kthread+0x7b7/0x940
[ 79.933840][ T1044] ? __pfx_worker_thread+0x10/0x10
[ 79.933851][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933862][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933875][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933886][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933898][ T1044] ? _raw_spin_unlock_irq+0x23/0x50
[ 79.933907][ T1044] ? lockdep_hardirqs_on+0x9d/0x150
[ 79.933917][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933929][ T1044] ret_from_fork+0x4b/0x80
[ 79.933940][ T1044] ? __pfx_kthread+0x10/0x10
[ 79.933952][ T1044] ret_from_fork_asm+0x1a/0x30
[ 79.933964][ T1044]
[ 79.933968][ T1044]
[ 80.049318][ T1044] Allocated by task 5333:
[ 80.051029][ T1044] kasan_save_track+0x3f/0x80
[ 80.052969][ T1044] __kasan_kmalloc+0x9d/0xb0
[ 80.054873][ T1044] __kmalloc_cache_noprof+0x236/0x370
[ 80.057091][ T1044] __bch2_dev_alloc+0x57/0xa60
[ 80.059076][ T1044] bch2_dev_alloc+0xd6/0x180
[ 80.060949][ T1044] bch2_fs_open+0x315f/0x32a0
[ 80.062846][ T1044] bch2_fs_get_tree+0x77b/0x18f0
[ 80.064870][ T1044] vfs_get_tree+0x90/0x2b0
[ 80.066734][ T1044] do_new_mount+0x2cf/0xb70
[ 80.068518][ T1044] __se_sys_mount+0x38c/0x400
[ 80.070418][ T1044] do_syscall_64+0xf3/0x230
[ 80.072241][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.074603][ T1044]
[ 80.075617][ T1044] Freed by task 5333:
[ 80.077261][ T1044] kasan_save_track+0x3f/0x80
[ 80.079205][ T1044] kasan_save_free_info+0x40/0x50
[ 80.081243][ T1044] __kasan_slab_free+0x59/0x70
[ 80.083183][ T1044] kfree+0x198/0x430
[ 80.084795][ T1044] kobject_put+0x22f/0x480
[ 80.086600][ T1044] bch2_fs_free+0x27b/0x3c0
[ 80.088337][ T1044] deactivate_locked_super+0xc4/0x130
[ 80.090312][ T1044] bch2_fs_get_tree+0x11b4/0x18f0
[ 80.092191][ T1044] vfs_get_tree+0x90/0x2b0
[ 80.093856][ T1044] do_new_mount+0x2cf/0xb70
[ 80.095564][ T1044] __se_sys_mount+0x38c/0x400
[ 80.097434][ T1044] do_syscall_64+0xf3/0x230
[ 80.099232][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.101553][ T1044]
[ 80.102544][ T1044] Last potentially related work creation:
[ 80.104765][ T1044] kasan_save_stack+0x3f/0x60
[ 80.106842][ T1044] kasan_record_aux_stack+0xbf/0xd0
[ 80.108926][ T1044] insert_work+0x3e/0x330
[ 80.110554][ T1044] __queue_work+0xda3/0x10a0
[ 80.112474][ T1044] queue_work_on+0x1c4/0x380
[ 80.114370][ T1044] bch2_dev_do_invalidates+0x17a/0x1f0
[ 80.116365][ T1044] bch2_do_invalidates+0x29/0x60
[ 80.118748][ T1044] __bch2_fs_read_write+0x386/0x3b0
[ 80.120790][ T1044] bch2_fs_read_write_early+0x2b/0x40
[ 80.122849][ T1044] bch2_run_recovery_pass+0xf0/0x1e0
[ 80.124988][ T1044] bch2_run_recovery_passes+0x2ad/0xa90
[ 80.127153][ T1044] bch2_fs_recovery+0x292a/0x3e20
[ 80.129005][ T1044] bch2_fs_start+0x2fb/0x610
[ 80.130809][ T1044] bch2_fs_get_tree+0x113e/0x18f0
[ 80.132679][ T1044] vfs_get_tree+0x90/0x2b0
[ 80.134441][ T1044] do_new_mount+0x2cf/0xb70
[ 80.136309][ T1044] __se_sys_mount+0x38c/0x400
[ 80.138225][ T1044] do_syscall_64+0xf3/0x230
[ 80.140085][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.142414][ T1044]
[ 80.143416][ T1044] Second to last potentially related work creation:
[ 80.145879][ T1044] kasan_save_stack+0x3f/0x60
[ 80.147700][ T1044] kasan_record_aux_stack+0xbf/0xd0
[ 80.149586][ T1044] insert_work+0x3e/0x330
[ 80.151214][ T1044] __queue_work+0xda3/0x10a0
[ 80.152911][ T1044] queue_work_on+0x1c4/0x380
[ 80.154808][ T1044] bch2_dev_do_discards+0x17a/0x1f0
[ 80.156842][ T1044] bch2_do_discards+0x29/0x60
[ 80.158678][ T1044] __bch2_fs_read_write+0x37e/0x3b0
[ 80.160675][ T1044] bch2_fs_read_write_early+0x2b/0x40
[ 80.162596][ T1044] bch2_run_recovery_pass+0xf0/0x1e0
[ 80.164564][ T1044] bch2_run_recovery_passes+0x2ad/0xa90
[ 80.166689][ T1044] bch2_fs_recovery+0x292a/0x3e20
[ 80.168696][ T1044] bch2_fs_start+0x2fb/0x610
[ 80.170569][ T1044] bch2_fs_get_tree+0x113e/0x18f0
[ 80.172615][ T1044] vfs_get_tree+0x90/0x2b0
[ 80.174345][ T1044] do_new_mount+0x2cf/0xb70
[ 80.176008][ T1044] __se_sys_mount+0x38c/0x400
[ 80.177807][ T1044] do_syscall_64+0xf3/0x230
[ 80.179509][ T1044] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.182048][ T1044]
[ 80.183018][ T1044] The buggy address belongs to the object at ffff88803689c000
[ 80.183018][ T1044] which belongs to the cache kmalloc-4k of size 4096
[ 80.187562][ T1044] The buggy address is located 176 bytes inside of
[ 80.187562][ T1044] freed 4096-byte region [ffff88803689c000, ffff88803689d000)
[ 80.192572][ T1044]
[ 80.193553][ T1044] The buggy address belongs to the physical page:
[ 80.196160][ T1044] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36898
[ 80.199605][ T1044] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 80.202954][ T1044] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 80.205930][ T1044] page_type: f5(slab)
[ 80.207689][ T1044] raw: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[ 80.211203][ T1044] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 80.214668][ T1044] head: 04fff00000000040 ffff88801b042140 dead000000000100 dead000000000122
[ 80.218235][ T1044] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 80.221651][ T1044] head: 04fff00000000003 ffffea0000da2601 ffffffffffffffff 0000000000000000
[ 80.225279][ T1044] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 80.228879][ T1044] page dumped because: kasan: bad access detected
[ 80.231532][ T1044] page_owner tracks the page as allocated
[ 80.233813][ T1044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14623482500, free_ts 0
[ 80.241452][ T1044] post_alloc_hook+0x1f4/0x240
[ 80.243338][ T1044] get_page_from_freelist+0x3ac1/0x3c60
[ 80.245653][ T1044] __alloc_frozen_pages_noprof+0x266/0x580
[ 80.248174][ T1044] alloc_pages_mpol+0x339/0x690
[ 80.250356][ T1044] allocate_slab+0x8f/0x3a0
[ 80.252146][ T1044] ___slab_alloc+0xc3b/0x1500
[ 80.253880][ T1044] __slab_alloc+0x58/0xa0
[ 80.255543][ T1044] __kmalloc_cache_noprof+0x26a/0x370
[ 80.257630][ T1044] kobject_uevent_env+0x28b/0x8e0
[ 80.259497][ T1044] driver_register+0x2d6/0x320
[ 80.261379][ T1044] do_one_initcall+0x24a/0x940
[ 80.263261][ T1044] do_initcall_level+0x157/0x210
[ 80.265096][ T1044] do_initcalls+0x71/0xd0
[ 80.266750][ T1044] kernel_init_freeable+0x432/0x5d0
[ 80.268691][ T1044] kernel_init+0x1d/0x2b0
[ 80.270429][ T1044] ret_from_fork+0x4b/0x80
[ 80.272237][ T1044] page_owner free stack trace missing
[ 80.274325][ T1044]
[ 80.275277][ T1044] Memory state around the buggy address:
[ 80.277369][ T1044] ffff88803689bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.280308][ T1044] ffff88803689c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.283642][ T1044] >ffff88803689c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.287804][ T1044] ^
[ 80.290350][ T1044] ffff88803689c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.293599][ T1044] ffff88803689c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.296689][ T1044] ==================================================================
[ 80.319380][ T1044] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 80.322082][ T1044] CPU: 0 UID: 0 PID: 1044 Comm: kworker/u4:9 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full)
[ 80.326720][ T1044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 80.330596][ T1044] Workqueue: loop0 loop_workfn
[ 80.332414][ T1044] Call Trace:
[ 80.333621][ T1044]
[ 80.334715][ T1044] dump_stack_lvl+0x241/0x360
[ 80.336444][ T1044] ? __pfx_dump_stack_lvl+0x10/0x10
[ 80.338546][ T1044] ? __pfx__printk+0x10/0x10
[ 80.340394][ T1044] ? vscnprintf+0x5d/0x90
[ 80.342028][ T1044] panic+0x349/0x880
[ 80.343634][ T1044] ? check_panic_on_warn+0x21/0xb0
[ 80.345436][ T1044] ? __pfx_panic+0x10/0x10
[ 80.347244][ T1044] ? _raw_spin_unlock_irqrestore+0x134/0x140
[ 80.349561][ T1044] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 80.352035][ T1044] ? print_report+0x519/0x5b0
[ 80.353763][ T1044] check_panic_on_warn+0x86/0xb0
[ 80.355689][ T1044] ? percpu_ref_put+0xda/0x250
[ 80.357521][ T1044] end_report+0x77/0x160
[ 80.359148][ T1044] kasan_report+0x154/0x180
[ 80.360818][ T1044] ? percpu_ref_put+0xda/0x250
[ 80.362782][ T1044] ? percpu_ref_put+0x1f/0x250
[ 80.364927][ T1044] percpu_ref_put+0xda/0x250
[ 80.366790][ T1044] blk_update_request+0x5e5/0x1160
[ 80.368787][ T1044] blk_mq_end_request+0x3e/0x70
[ 80.370628][ T1044] loop_process_work+0x1bdf/0x21d0
[ 80.372649][ T1044] ? btree_interior_update_work+0x28ba/0x2990
[ 80.374897][ T1044] ? __pfx_loop_process_work+0x10/0x10
[ 80.377177][ T1044] ? __lock_acquire+0xad5/0xd80
[ 80.379057][ T1044] ? btree_interior_update_work+0x28ba/0x2990
[ 80.381314][ T1044] ? do_raw_spin_lock+0x151/0x370
[ 80.383205][ T1044] ? do_raw_spin_unlock+0x58/0x8b0
[ 80.385104][ T1044] ? look_up_lock_class+0x7b/0x170
[ 80.387031][ T1044] ? register_lock_class+0x54/0x330
[ 80.389161][ T1044] ? __lock_acquire+0xad5/0xd80
[ 80.391136][ T1044] ? process_scheduled_works+0x9cb/0x18e0
[ 80.393383][ T1044] process_scheduled_works+0xac3/0x18e0
[ 80.395656][ T1044] ? __pfx_process_scheduled_works+0x10/0x10
[ 80.398075][ T1044] ? assign_work+0x367/0x3d0
[ 80.399965][ T1044] worker_thread+0x870/0xd50
[ 80.401770][ T1044] ? __kthread_parkme+0x1a8/0x200
[ 80.403615][ T1044] ? __pfx_worker_thread+0x10/0x10
[ 80.405413][ T1044] kthread+0x7b7/0x940
[ 80.406908][ T1044] ? __pfx_worker_thread+0x10/0x10
[ 80.408711][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.410295][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.412025][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.413710][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.415439][ T1044] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.417471][ T1044] ? lockdep_hardirqs_on+0x9d/0x150
[ 80.419445][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.421092][ T1044] ret_from_fork+0x4b/0x80
[ 80.422808][ T1044] ? __pfx_kthread+0x10/0x10
[ 80.424687][ T1044] ret_from_fork_asm+0x1a/0x30
[ 80.426642][ T1044]
[ 80.428195][ T1044] Kernel Offset: disabled
[ 80.429968][ T1044] Rebooting in 86400 seconds..