program:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}], [{@audit}, {@obj_user={'obj_user', 0x3d, 'smac\x01\x00\x00\x00M\x02'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '|.'}}, {@euid_gt}]}, 0x3, 0x58ad, &(0x7f000000b240)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) (fail_nth: 1)
[ 70.927304][ T5090] Bluetooth: hci0: command tx timeout
[ 71.668348][ T5105] loop0: detected capacity change from 0 to 32768
[ 71.857646][ T5105] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noshard_inode_numbers,noinodes_use_key_cache,journal_flush_delay=1001,nojournal_transaction_names
[ 71.900155][ T5105] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 71.919025][ T5105] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.12: rebalance_work_acct_fix
[ 71.919025][ T5105] running recovery passes: check_allocations
[ 72.010619][ T5105] bcachefs (loop0): accounting_read... done
[ 72.012433][ T5105] bcachefs (loop0): alloc_read... done
[ 72.014124][ T5105] bcachefs (loop0): stripes_read... done
[ 72.036443][ T5105] bcachefs (loop0): snapshots_read... done
[ 72.038996][ T5105] bcachefs (loop0): check_allocations...
[ 72.062506][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.062529][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 72.148527][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.148543][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 72.164011][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.164025][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 72.184562][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.184577][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 72.199752][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.199765][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 72.217676][ T5105] btree ptr not marked in member info btree allocated bitmap
[ 72.217691][ T5105] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 72.238361][ T5105] done
[ 72.250027][ T5105] bcachefs (loop0): going read-write
[ 72.259871][ T5105] bcachefs (loop0): journal_replay... done
[ 72.489848][ T5105] bcachefs (loop0): resume_logged_ops... done
[ 72.492297][ T5105] bcachefs (loop0): delete_dead_inodes... done
[ 72.498352][ T5105] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 72.501885][ T5105] bcachefs (loop0): resume_logged_ops... done
[ 72.505448][ T5105] bcachefs (loop0): delete_dead_inodes... done
[ 72.518330][ T5105] bcachefs (loop0): done starting filesystem
[ 72.549185][ T24] audit: type=1800 audit(1727570810.612:2): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=536870912 res=0 errno=0
[ 72.648309][ T5105] ==================================================================
[ 72.651283][ T5105] BUG: KASAN: slab-use-after-free in bch2_direct_write+0x2a60/0x3140
[ 72.654414][ T5105] Read of size 8 at addr ffff88804cb590a0 by task syz.0.0/5105
[ 72.657156][ T5105]
[ 72.658049][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 72.661651][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.665276][ T5105] Call Trace:
[ 72.666414][ T5105]
[ 72.667448][ T5105] dump_stack_lvl+0x241/0x360
[ 72.669295][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.671295][ T5105] ? __pfx__printk+0x10/0x10
[ 72.673316][ T5105] ? _printk+0xd5/0x120
[ 72.675137][ T5105] ? __virt_addr_valid+0x183/0x530
[ 72.677330][ T5105] ? __virt_addr_valid+0x183/0x530
[ 72.679566][ T5105] print_report+0x169/0x550
[ 72.681539][ T5105] ? __virt_addr_valid+0x183/0x530
[ 72.683791][ T5105] ? __virt_addr_valid+0x183/0x530
[ 72.685864][ T5105] ? __virt_addr_valid+0x45f/0x530
[ 72.687814][ T5105] ? __phys_addr+0xba/0x170
[ 72.689414][ T5105] ? bch2_direct_write+0x2a60/0x3140
[ 72.691074][ T5105] kasan_report+0x143/0x180
[ 72.692585][ T5105] ? bch2_direct_write+0x2a60/0x3140
[ 72.694153][ T5105] bch2_direct_write+0x2a60/0x3140
[ 72.695807][ T5105] ? __pfx_bch2_direct_write+0x10/0x10
[ 72.697486][ T5105] bch2_write_iter+0x18e/0x23f0
[ 72.699227][ T5105] ? __pfx_lock_acquire+0x10/0x10
[ 72.701113][ T5105] ? __lock_acquire+0x1384/0x2050
[ 72.702989][ T5105] ? __pfx_bch2_write_iter+0x10/0x10
[ 72.705051][ T5105] do_iter_readv_writev+0x600/0x880
[ 72.707074][ T5105] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 72.709273][ T5105] ? rcu_read_lock_any_held+0xb7/0x160
[ 72.711354][ T5105] vfs_writev+0x376/0xba0
[ 72.713011][ T5105] ? __pfx___mutex_trylock_common+0x10/0x10
[ 72.715213][ T5105] ? rcu_is_watching+0x15/0xb0
[ 72.717043][ T5105] ? __pfx_vfs_writev+0x10/0x10
[ 72.718886][ T5105] ? fdget_pos+0x24e/0x320
[ 72.720554][ T5105] do_writev+0x1b1/0x350
[ 72.722142][ T5105] ? __pfx_do_writev+0x10/0x10
[ 72.723803][ T5105] ? do_syscall_64+0x100/0x230
[ 72.725498][ T5105] ? do_syscall_64+0xb6/0x230
[ 72.727110][ T5105] do_syscall_64+0xf3/0x230
[ 72.728804][ T5105] ? clear_bhb_loop+0x35/0x90
[ 72.730543][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.732750][ T5105] RIP: 0033:0x7f3d20d7dff9
[ 72.734428][ T5105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.741416][ T5105] RSP: 002b:00007f3d21b68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 72.744647][ T5105] RAX: ffffffffffffffda RBX: 00007f3d20f36058 RCX: 00007f3d20d7dff9
[ 72.747648][ T5105] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000008
[ 72.750775][ T5105] RBP: 00007f3d21b68090 R08: 0000000000000000 R09: 0000000000000000
[ 72.753819][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 72.756430][ T5105] R13: 0000000000000000 R14: 00007f3d20f36058 R15: 00007ffd0ca949c8
[ 72.758997][ T5105]
[ 72.760266][ T5105]
[ 72.761169][ T5105] Allocated by task 5105:
[ 72.762785][ T5105] kasan_save_track+0x3f/0x80
[ 72.764550][ T5105] __kasan_mempool_unpoison_object+0x9e/0x160
[ 72.766740][ T5105] remove_element+0x129/0x1a0
[ 72.768417][ T5105] mempool_alloc_noprof+0x54e/0x5a0
[ 72.770273][ T5105] bio_alloc_bioset+0x26f/0x1130
[ 72.772002][ T5105] bch2_direct_write+0x5a0/0x3140
[ 72.773832][ T5105] bch2_write_iter+0x18e/0x23f0
[ 72.775570][ T5105] do_iter_readv_writev+0x600/0x880
[ 72.777217][ T5105] vfs_writev+0x376/0xba0
[ 72.778707][ T5105] do_writev+0x1b1/0x350
[ 72.780405][ T5105] do_syscall_64+0xf3/0x230
[ 72.782224][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.784419][ T5105]
[ 72.785373][ T5105] Freed by task 5105:
[ 72.786915][ T5105] kasan_save_track+0x3f/0x80
[ 72.788719][ T5105] kasan_save_free_info+0x40/0x50
[ 72.790699][ T5105] __kasan_mempool_poison_object+0xaa/0x120
[ 72.793111][ T5105] mempool_free+0x1c8/0x390
[ 72.794788][ T5105] bch2_direct_write+0x2a49/0x3140
[ 72.796778][ T5105] bch2_write_iter+0x18e/0x23f0
[ 72.798665][ T5105] do_iter_readv_writev+0x600/0x880
[ 72.800648][ T5105] vfs_writev+0x376/0xba0
[ 72.802478][ T5105] do_writev+0x1b1/0x350
[ 72.804431][ T5105] do_syscall_64+0xf3/0x230
[ 72.806223][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.808759][ T5105]
[ 72.809868][ T5105] The buggy address belongs to the object at ffff88804cb58fc0
[ 72.809868][ T5105] which belongs to the cache bio-119 of size 1192
[ 72.815893][ T5105] The buggy address is located 224 bytes inside of
[ 72.815893][ T5105] freed 1192-byte region [ffff88804cb58fc0, ffff88804cb59468)
[ 72.821304][ T5105]
[ 72.822248][ T5105] The buggy address belongs to the physical page:
[ 72.824580][ T5105] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4cb58
[ 72.827653][ T5105] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 72.830475][ T5105] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 72.833098][ T5105] page_type: f5(slab)
[ 72.834480][ T5105] raw: 04fff00000000040 ffff88803dc40c80 dead000000000122 0000000000000000
[ 72.837423][ T5105] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000
[ 72.840625][ T5105] head: 04fff00000000040 ffff88803dc40c80 dead000000000122 0000000000000000
[ 72.844014][ T5105] head: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000
[ 72.846780][ T5105] head: 04fff00000000002 ffffea000132d601 ffffffffffffffff 0000000000000000
[ 72.849626][ T5105] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 72.852376][ T5105] page dumped because: kasan: bad access detected
[ 72.854493][ T5105] page_owner tracks the page as allocated
[ 72.856515][ T5105] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5105, tgid 5103 (syz.0.0), ts 71808864816, free_ts 0
[ 72.863948][ T5105] post_alloc_hook+0x1f3/0x230
[ 72.865513][ T5105] get_page_from_freelist+0x3045/0x3190
[ 72.867479][ T5105] __alloc_pages_noprof+0x256/0x6c0
[ 72.869404][ T5105] alloc_pages_mpol_noprof+0x3e8/0x680
[ 72.871477][ T5105] alloc_slab_page+0x6a/0x120
[ 72.873332][ T5105] allocate_slab+0x5a/0x2f0
[ 72.875143][ T5105] ___slab_alloc+0xcd1/0x14b0
[ 72.877035][ T5105] __slab_alloc+0x58/0xa0
[ 72.878892][ T5105] kmem_cache_alloc_noprof+0x1c1/0x2a0
[ 72.880867][ T5105] mempool_init_node+0x1ee/0x4e0
[ 72.882637][ T5105] mempool_init_noprof+0x3a/0x50
[ 72.884429][ T5105] bioset_init+0x2e8/0x820
[ 72.886039][ T5105] bch2_fs_fs_io_direct_init+0x67/0x90
[ 72.888180][ T5105] bch2_fs_open+0x2d77/0x2f80
[ 72.890018][ T5105] bch2_fs_get_tree+0x738/0x1710
[ 72.891914][ T5105] vfs_get_tree+0x90/0x2b0
[ 72.893722][ T5105] page_owner free stack trace missing
[ 72.895683][ T5105]
[ 72.896574][ T5105] Memory state around the buggy address:
[ 72.898602][ T5105] ffff88804cb58f80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 72.901725][ T5105] ffff88804cb59000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.904620][ T5105] >ffff88804cb59080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.907612][ T5105] ^
[ 72.909527][ T5105] ffff88804cb59100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.912536][ T5105] ffff88804cb59180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 72.915506][ T5105] ==================================================================
[ 73.037350][ T48] Bluetooth: hci0: command tx timeout
[ 73.256026][ T5105] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 73.258673][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz.0.0 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0
[ 73.262293][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.266102][ T5105] Call Trace:
[ 73.267305][ T5105]
[ 73.268363][ T5105] dump_stack_lvl+0x241/0x360
[ 73.269999][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.271895][ T5105] ? __pfx__printk+0x10/0x10
[ 73.273623][ T5105] ? preempt_schedule+0xe1/0xf0
[ 73.275481][ T5105] ? vscnprintf+0x5d/0x90
[ 73.277152][ T5105] panic+0x349/0x880
[ 73.278568][ T5105] ? check_panic_on_warn+0x21/0xb0
[ 73.280479][ T5105] ? __pfx_panic+0x10/0x10
[ 73.282145][ T5105] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 73.284205][ T5105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 73.286509][ T5105] ? print_report+0x502/0x550
[ 73.288277][ T5105] check_panic_on_warn+0x86/0xb0
[ 73.290101][ T5105] ? bch2_direct_write+0x2a60/0x3140
[ 73.292001][ T5105] end_report+0x77/0x160
[ 73.293527][ T5105] kasan_report+0x154/0x180
[ 73.295132][ T5105] ? bch2_direct_write+0x2a60/0x3140
[ 73.297057][ T5105] bch2_direct_write+0x2a60/0x3140
[ 73.299001][ T5105] ? __pfx_bch2_direct_write+0x10/0x10
[ 73.301062][ T5105] bch2_write_iter+0x18e/0x23f0
[ 73.302911][ T5105] ? __pfx_lock_acquire+0x10/0x10
[ 73.304929][ T5105] ? __lock_acquire+0x1384/0x2050
[ 73.306943][ T5105] ? __pfx_bch2_write_iter+0x10/0x10
[ 73.309043][ T5105] do_iter_readv_writev+0x600/0x880
[ 73.311020][ T5105] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 73.313130][ T5105] ? rcu_read_lock_any_held+0xb7/0x160
[ 73.315238][ T5105] vfs_writev+0x376/0xba0
[ 73.316987][ T5105] ? __pfx___mutex_trylock_common+0x10/0x10
[ 73.319269][ T5105] ? rcu_is_watching+0x15/0xb0
[ 73.321085][ T5105] ? __pfx_vfs_writev+0x10/0x10
[ 73.322963][ T5105] ? fdget_pos+0x24e/0x320
[ 73.324604][ T5105] do_writev+0x1b1/0x350
[ 73.326080][ T5105] ? __pfx_do_writev+0x10/0x10
[ 73.327811][ T5105] ? do_syscall_64+0x100/0x230
[ 73.329546][ T5105] ? do_syscall_64+0xb6/0x230
[ 73.331180][ T5105] do_syscall_64+0xf3/0x230
[ 73.332849][ T5105] ? clear_bhb_loop+0x35/0x90
[ 73.334429][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.336680][ T5105] RIP: 0033:0x7f3d20d7dff9
[ 73.338248][ T5105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 73.344665][ T5105] RSP: 002b:00007f3d21b68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 73.347504][ T5105] RAX: ffffffffffffffda RBX: 00007f3d20f36058 RCX: 00007f3d20d7dff9
[ 73.350419][ T5105] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000008
[ 73.353165][ T5105] RBP: 00007f3d21b68090 R08: 0000000000000000 R09: 0000000000000000
[ 73.356003][ T5105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 73.359135][ T5105] R13: 0000000000000000 R14: 00007f3d20f36058 R15: 00007ffd0ca949c8
[ 73.362144][ T5105]
[ 73.363561][ T5105] Kernel Offset: disabled
[ 73.365163][ T5105] Rebooting in 86400 seconds..