syzkaller login: [ 97.001095][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:48737' (ED25519) to the list of known hosts. executing program [ 104.094909][ T5100] loop0: detected capacity change from 0 to 32768 [ 104.197452][ T5100] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,journal_flush_disabled,fsck,norecovery,reconstruct_alloc,no_data_io [ 104.206605][ T5100] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 104.210687][ T5100] bcachefs (loop0): Version upgrade required: [ 104.210687][ T5100] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 104.210687][ T5100] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 104.210687][ T5100] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 104.243984][ T5100] bcachefs (loop0): dropping and reconstructing all alloc info [ 104.257065][ T5100] bcachefs (loop0): check_topology... done [ 104.259358][ T5100] bcachefs (loop0): accounting_read... done [ 104.263211][ T5100] bcachefs (loop0): alloc_read... done [ 104.266054][ T5100] bcachefs (loop0): stripes_read... done [ 104.268570][ T5100] bcachefs (loop0): snapshots_read... done [ 104.271637][ T5100] bcachefs (loop0): check_allocations... [ 104.278639][ T5100] ------------[ cut here ]------------ [ 104.284471][ T5100] kernel BUG at fs/bcachefs/sb-members.c:453! [ 104.287384][ T5100] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 104.291863][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: syz-executor307 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 104.295844][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.300024][ T5100] RIP: 0010:bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.303296][ T5100] Code: b3 f1 ff ff e8 af 9f 4c fd 90 0f 0b e8 a7 9f 4c fd 90 0f 0b e8 9f 9f 4c fd 90 0f 0b e8 97 9f 4c fd 90 0f 0b e8 8f 9f 4c fd 90 <0f> 0b e8 87 9f 4c fd 90 0f 0b e8 7f 0d 7e 07 66 2e 0f 1f 84 00 00 [ 104.311769][ T5100] RSP: 0018:ffffc90002dfe5a0 EFLAGS: 00010293 [ 104.313989][ T5100] RAX: ffffffff84484871 RBX: 00000000ffffffc8 RCX: ffff88801e284880 [ 104.316929][ T5100] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000039 [ 104.319883][ T5100] RBP: ffffc90002dfe7b0 R08: ffffffff844844f1 R09: 0000000000000000 [ 104.322906][ T5100] R10: 0000042098000000 R11: 0000000000000000 R12: 000000000000003f [ 104.327000][ T5100] R13: 0000042098000000 R14: ffff88803f7839d0 R15: 000000000000003f [ 104.330586][ T5100] FS: 0000555592498380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 104.333898][ T5100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.336384][ T5100] CR2: 0000561dbfb3d000 CR3: 00000000400e8000 CR4: 0000000000352ef0 [ 104.339423][ T5100] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.342899][ T5100] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.346537][ T5100] Call Trace: [ 104.347991][ T5100] [ 104.349106][ T5100] ? __die_body+0x5f/0xb0 [ 104.350638][ T5100] ? die+0x9e/0xc0 [ 104.352082][ T5100] ? do_trap+0x15a/0x3a0 [ 104.353530][ T5100] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.355719][ T5100] ? do_error_trap+0x1dc/0x2c0 [ 104.357844][ T5100] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.360910][ T5100] ? __pfx_do_error_trap+0x10/0x10 [ 104.363236][ T5100] ? report_bug+0x3e8/0x500 [ 104.365166][ T5100] ? handle_invalid_op+0x34/0x40 [ 104.367036][ T5100] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.369161][ T5100] ? exc_invalid_op+0x38/0x50 [ 104.370893][ T5100] ? asm_exc_invalid_op+0x1a/0x20 [ 104.372782][ T5100] ? bch2_dev_btree_bitmap_mark+0xc51/0xff0 [ 104.375231][ T5100] ? bch2_dev_btree_bitmap_mark+0xfd1/0xff0 [ 104.377241][ T5100] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.379829][ T5100] ? __pfx_bch2_dev_btree_bitmap_mark+0x10/0x10 [ 104.382451][ T5100] ? bch2_dev_btree_bitmap_marked+0x2f/0xda0 [ 104.384816][ T5100] ? bch2_bkey_val_to_text+0xf0/0x160 [ 104.387006][ T5100] bch2_gc_mark_key+0xc9b/0x10e0 [ 104.388860][ T5100] ? __pfx_bch2_gc_mark_key+0x10/0x10 [ 104.390896][ T5100] ? gc_pos_set+0x5c0/0x810 [ 104.392702][ T5100] ? __asan_memset+0x23/0x50 [ 104.394844][ T5100] bch2_check_allocations+0x22e8/0x6e80 [ 104.398127][ T5100] ? prb_first_seq+0x131/0x210 [ 104.401032][ T5100] ? this_cpu_in_panic+0x4f/0x80 [ 104.403108][ T5100] ? bch2_check_allocations+0x792/0x6e80 [ 104.405194][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 104.407207][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 104.409156][ T5100] ? do_raw_spin_lock+0x14f/0x370 [ 104.411087][ T5100] ? __pfx_bch2_check_allocations+0x10/0x10 [ 104.413571][ T5100] ? prb_read_valid+0xa9/0xf0 [ 104.415820][ T5100] ? __pfx_prb_read_valid+0x10/0x10 [ 104.418541][ T5100] ? desc_read+0x200/0x3f0 [ 104.421280][ T5100] ? desc_read+0x1a2/0x3f0 [ 104.423598][ T5100] ? prb_first_seq+0x131/0x210 [ 104.425759][ T5100] ? __pfx_prb_first_seq+0x10/0x10 [ 104.427789][ T5100] ? this_cpu_in_panic+0x4f/0x80 [ 104.429777][ T5100] ? _prb_read_valid+0xa39/0xac0 [ 104.431814][ T5100] ? bch2_check_allocations+0x1a14/0x6e80 [ 104.434641][ T5100] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.437862][ T5100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.440785][ T5100] ? __console_unlock+0x12d/0x1f0 [ 104.442807][ T5100] ? bch2_check_allocations+0x20dd/0x6e80 [ 104.444969][ T5100] ? this_cpu_in_panic+0x4f/0x80 [ 104.446743][ T5100] ? __wake_up_klogd+0xd5/0x110 [ 104.448608][ T5100] ? __pfx_lock_release+0x10/0x10 [ 104.450563][ T5100] ? rcu_is_watching+0x15/0xb0 [ 104.452767][ T5100] ? bch2_check_allocations+0x792/0x6e80 [ 104.455395][ T5100] ? __bch2_print+0x17a/0x220 [ 104.457425][ T5100] ? local_clock+0x10/0x30 [ 104.459204][ T5100] ? __pfx___bch2_print+0x10/0x10 [ 104.461155][ T5100] bch2_run_recovery_pass+0xf0/0x1e0 [ 104.463057][ T5100] bch2_run_recovery_passes+0x387/0x870 [ 104.465327][ T5100] bch2_fs_recovery+0x25cc/0x39c0 [ 104.467653][ T5100] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 104.469902][ T5100] ? __pfx_lock_release+0x10/0x10 [ 104.472233][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 104.474219][ T5100] ? __pfx_lock_release+0x10/0x10 [ 104.476374][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 104.478545][ T5100] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 104.480717][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 104.482880][ T5100] ? llist_reverse_order+0x72/0x90 [ 104.484778][ T5100] bch2_fs_start+0x356/0x5b0 [ 104.486409][ T5100] bch2_fs_get_tree+0xd68/0x1710 [ 104.488169][ T5100] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 104.490059][ T5100] ? generic_parse_monolithic+0x387/0x400 [ 104.492232][ T5100] ? apparmor_capable+0x13b/0x1b0 [ 104.494111][ T5100] vfs_get_tree+0x90/0x2b0 [ 104.495781][ T5100] do_new_mount+0x2be/0xb40 [ 104.497404][ T5100] ? __pfx_do_new_mount+0x10/0x10 [ 104.499434][ T5100] __se_sys_mount+0x2d6/0x3c0 [ 104.501149][ T5100] ? __pfx___se_sys_mount+0x10/0x10 [ 104.503082][ T5100] ? do_syscall_64+0x100/0x230 [ 104.504694][ T5100] ? __x64_sys_mount+0x20/0xc0 [ 104.506395][ T5100] do_syscall_64+0xf3/0x230 [ 104.508083][ T5100] ? clear_bhb_loop+0x35/0x90 [ 104.509802][ T5100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.512223][ T5100] RIP: 0033:0x7fa72a53cf2a [ 104.513891][ T5100] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 104.522390][ T5100] RSP: 002b:00007ffd5b715e88 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 104.525645][ T5100] RAX: ffffffffffffffda RBX: 00007ffd5b715ea0 RCX: 00007fa72a53cf2a [ 104.528577][ T5100] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 00007ffd5b715ea0 [ 104.531223][ T5100] RBP: 0000000000000004 R08: 00007ffd5b715ee0 R09: 0000000000005901 [ 104.533542][ T5100] R10: 0000000000808016 R11: 0000000000000282 R12: 0000000000808016 [ 104.536182][ T5100] R13: 00007ffd5b715ee0 R14: 0000000000000003 R15: 0000000001000000 [ 104.538906][ T5100] [ 104.539983][ T5100] Modules linked in: [ 104.541598][ T5100] ---[ end trace 0000000000000000 ]--- [ 104.553112][ T5100] RIP: 0010:bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 104.555659][ T5100] Code: b3 f1 ff ff e8 af 9f 4c fd 90 0f 0b e8 a7 9f 4c fd 90 0f 0b e8 9f 9f 4c fd 90 0f 0b e8 97 9f 4c fd 90 0f 0b e8 8f 9f 4c fd 90 <0f> 0b e8 87 9f 4c fd 90 0f 0b e8 7f 0d 7e 07 66 2e 0f 1f 84 00 00 [ 104.563071][ T5100] RSP: 0018:ffffc90002dfe5a0 EFLAGS: 00010293 [ 104.565252][ T5100] RAX: ffffffff84484871 RBX: 00000000ffffffc8 RCX: ffff88801e284880 [ 104.568118][ T5100] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000039 [ 104.571210][ T5100] RBP: ffffc90002dfe7b0 R08: ffffffff844844f1 R09: 0000000000000000 [ 104.574607][ T5100] R10: 0000042098000000 R11: 0000000000000000 R12: 000000000000003f [ 104.577560][ T5100] R13: 0000042098000000 R14: ffff88803f7839d0 R15: 000000000000003f [ 104.580520][ T5100] FS: 0000555592498380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 104.584231][ T5100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.586746][ T5100] CR2: 0000561dbfb3d000 CR3: 00000000400e8000 CR4: 0000000000352ef0 [ 104.589559][ T5100] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.593014][ T5100] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.596140][ T5100] Kernel panic - not syncing: Fatal exception [ 104.598862][ T5100] Kernel Offset: disabled [ 104.600481][ T5100] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:46:04 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002dfdc50 R8 =ffffffff854a54bb R9 =1ffff11003d95046 R10=dffffc0000000000 R11=ffffffff854a5470 R12=dffffc0000000000 R13=ffffffff9a410f11 R14=0000000000000030 R15=00000000000003f8 RIP=ffffffff854a54ee RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555592498380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561dbfb3d000 CR3=00000000400e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5b716020 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa72a5c0560 00007fa72a5b45d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa72a5a5bc4 00007fa72a5b9240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000