program: syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000000)={[{@errors_continue}], [{@smackfshat={'smackfshat', 0x3d, '*'}}, {@obj_type={'obj_type', 0x3d, '(\xaa)#!'}}, {@smackfsdef={'smackfsdef', 0x3d, 'smackfsroot'}}, {@euid_eq}, {@appraise_type}, {@flag='lazytime'}, {@smackfstransmute}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'er\xd7)\x1c*ontinuet\xa2\x1b\xf5\xc4\x88\x90\x9f9\xedGY\x067\xed\x8b\xa9\x8a\xb8th\n\rC8,\xaf\xa3\xe1Q.\x1cY\x84\xc8H\xf9\x8f\xa76\xaa:u64s 0, fixing [ 80.363171][ T5330] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 80.366469][ T5330] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 80.366469][ T5330] running recovery passes: check_allocations,check_inodes [ 80.380896][ T5330] bcachefs (loop0): accounting_read... done [ 80.383763][ T5330] bcachefs (loop0): alloc_read... done [ 80.385979][ T5330] bcachefs (loop0): stripes_read... done [ 80.389393][ T5330] bcachefs (loop0): snapshots_read... done [ 80.391785][ T5330] bcachefs (loop0): check_allocations... [ 80.393952][ T5330] bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.401481][ T5330] bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.406842][ T5330] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.410442][ T5330] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.414110][ T5330] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.418538][ T5330] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.422443][ T5330] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.425563][ T5330] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.429656][ T5330] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.432530][ T5330] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.436037][ T5330] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.440339][ T5330] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.444002][ T5330] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.446938][ T5330] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.451409][ T5330] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.454507][ T5330] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.459142][ T5330] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.462140][ T5330] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 80.465437][ T5330] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.469817][ T5330] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.474122][ T5330] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.477183][ T5330] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.482436][ T5330] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.485874][ T5330] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.490620][ T5330] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.494363][ T5330] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.499275][ T5330] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.502404][ T5330] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.505914][ T5330] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.509712][ T5330] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.513548][ T5330] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.516730][ T5330] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.521738][ T5330] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.524661][ T5330] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.528748][ T5330] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.531873][ T5330] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.535461][ T5330] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.539520][ T5330] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.543158][ T5330] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.546243][ T5330] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.550786][ T5330] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.553903][ T5330] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.558603][ T5330] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.561582][ T5330] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.565297][ T5330] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.569684][ T5330] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.573142][ T5330] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.579629][ T5330] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.583827][ T5330] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 80.588209][ T5330] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 80.593560][ T5330] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.596996][ T5330] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.603071][ T5330] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.606357][ T5330] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.610523][ T5330] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.613790][ T5330] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.618472][ T5330] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.621572][ T5330] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.625326][ T5330] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.629160][ T5330] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.632728][ T5330] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.636102][ T5330] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.640876][ T5330] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.644112][ T5330] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.649405][ T5330] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 80.652532][ T5330] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 80.657014][ T5330] done [ 80.660266][ T5330] bcachefs (loop0): going read-write [ 80.664081][ T5330] bcachefs (loop0): journal_replay... [ 80.671854][ T1032] ------------[ cut here ]------------ [ 80.675968][ T1032] kernel BUG at fs/bcachefs/sb-members.c:453! [ 80.679587][ T1032] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 80.682107][ T1032] CPU: 0 UID: 0 PID: 1032 Comm: kworker/u4:8 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 80.685868][ T1032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.689593][ T1032] Workqueue: btree_update btree_interior_update_work [ 80.691889][ T1032] RIP: 0010:bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.694165][ T1032] Code: b3 f1 ff ff e8 df 3a 4c fd 90 0f 0b e8 d7 3a 4c fd 90 0f 0b e8 cf 3a 4c fd 90 0f 0b e8 c7 3a 4c fd 90 0f 0b e8 bf 3a 4c fd 90 <0f> 0b e8 b7 3a 4c fd 90 0f 0b e8 cf 48 7e 07 66 2e 0f 1f 84 00 00 [ 80.701005][ T1032] RSP: 0018:ffffc90002337680 EFLAGS: 00010293 [ 80.703222][ T1032] RAX: ffffffff84489dd1 RBX: 00000000ffffffc8 RCX: ffff888000f18000 [ 80.706042][ T1032] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000039 [ 80.708844][ T1032] RBP: ffffc90002337890 R08: ffffffff84489a51 R09: ebac05adae1fcd84 [ 80.711730][ T1032] R10: 5941de002b77f67a R11: ebac05adae1fcd84 R12: 000000000000003f [ 80.714604][ T1032] R13: 0000042098000000 R14: ffff8880432ea570 R15: 000000000000003f [ 80.717355][ T1032] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 80.720665][ T1032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.723128][ T1032] CR2: 00007ffc704fee48 CR3: 0000000042c28000 CR4: 0000000000352ef0 [ 80.726040][ T1032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.728997][ T1032] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.731813][ T1032] Call Trace: [ 80.733007][ T1032] [ 80.733990][ T1032] ? __die_body+0x5f/0xb0 [ 80.735502][ T1032] ? die+0x9e/0xc0 [ 80.736927][ T1032] ? do_trap+0x15a/0x3a0 [ 80.738461][ T1032] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.740586][ T1032] ? do_error_trap+0x1dc/0x2c0 [ 80.742384][ T1032] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.744418][ T1032] ? __pfx_do_error_trap+0x10/0x10 [ 80.746194][ T1032] ? report_bug+0x3e8/0x500 [ 80.747967][ T1032] ? handle_invalid_op+0x34/0x40 [ 80.749762][ T1032] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.751879][ T1032] ? exc_invalid_op+0x38/0x50 [ 80.753559][ T1032] ? asm_exc_invalid_op+0x1a/0x20 [ 80.755401][ T1032] ? bch2_dev_btree_bitmap_mark+0xc51/0xff0 [ 80.757516][ T1032] ? bch2_dev_btree_bitmap_mark+0xfd1/0xff0 [ 80.759551][ T1032] ? bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.761339][ T1032] ? __pfx_bch2_dev_btree_bitmap_mark+0x10/0x10 [ 80.763457][ T1032] ? lockdep_init_map_type+0xa1/0x910 [ 80.765353][ T1032] ? bch2_dev_btree_bitmap_marked+0x2f/0xda0 [ 80.767585][ T1032] btree_interior_update_work+0x478/0x2b10 [ 80.769788][ T1032] ? mark_lock+0x2ae/0x360 [ 80.771471][ T1032] ? __pfx_btree_interior_update_work+0x10/0x10 [ 80.773798][ T1032] ? __pfx_lock_acquire+0x10/0x10 [ 80.775737][ T1032] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.777869][ T1032] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.780190][ T1032] ? process_scheduled_works+0x976/0x1850 [ 80.782261][ T1032] process_scheduled_works+0xa63/0x1850 [ 80.784300][ T1032] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.786504][ T1032] ? assign_work+0x364/0x3d0 [ 80.788214][ T1032] worker_thread+0x870/0xd30 [ 80.789838][ T1032] ? __kthread_parkme+0x169/0x1d0 [ 80.791564][ T1032] ? __pfx_worker_thread+0x10/0x10 [ 80.793350][ T1032] kthread+0x2f0/0x390 [ 80.794798][ T1032] ? __pfx_worker_thread+0x10/0x10 [ 80.796619][ T1032] ? __pfx_kthread+0x10/0x10 [ 80.798134][ T1032] ret_from_fork+0x4b/0x80 [ 80.799774][ T1032] ? __pfx_kthread+0x10/0x10 [ 80.801473][ T1032] ret_from_fork_asm+0x1a/0x30 [ 80.803315][ T1032] [ 80.804401][ T1032] Modules linked in: [ 80.806254][ T1032] ---[ end trace 0000000000000000 ]--- [ 80.824293][ T1032] RIP: 0010:bch2_dev_btree_bitmap_mark+0xfd2/0xff0 [ 80.826461][ T1032] Code: b3 f1 ff ff e8 df 3a 4c fd 90 0f 0b e8 d7 3a 4c fd 90 0f 0b e8 cf 3a 4c fd 90 0f 0b e8 c7 3a 4c fd 90 0f 0b e8 bf 3a 4c fd 90 <0f> 0b e8 b7 3a 4c fd 90 0f 0b e8 cf 48 7e 07 66 2e 0f 1f 84 00 00 [ 80.834117][ T1032] RSP: 0018:ffffc90002337680 EFLAGS: 00010293 [ 80.836326][ T1032] RAX: ffffffff84489dd1 RBX: 00000000ffffffc8 RCX: ffff888000f18000 [ 80.839921][ T1032] RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000039 [ 80.842900][ T1032] RBP: ffffc90002337890 R08: ffffffff84489a51 R09: ebac05adae1fcd84 [ 80.845890][ T1032] R10: 5941de002b77f67a R11: ebac05adae1fcd84 R12: 000000000000003f [ 80.849392][ T1032] R13: 0000042098000000 R14: ffff8880432ea570 R15: 000000000000003f [ 80.852148][ T1032] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 80.855156][ T1032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.857788][ T1032] CR2: 00007ffc704fee48 CR3: 000000001aaee000 CR4: 0000000000352ef0 [ 80.860551][ T1032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.863543][ T1032] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.866408][ T1032] Kernel panic - not syncing: Fatal exception [ 80.868909][ T1032] Kernel Offset: disabled [ 80.870309][ T1032] Rebooting in 86400 seconds..