program: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010691552a0dfaa7e86497f06de133099900d38c2a6addf1596ff69050700000000000000b467d37f012105fc6dcba4", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf252800000008000300", @ANYRES32=r6, @ANYBLOB="0a000600505050505050100006003600ff0f0000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1888c6f16850ee9f0c58b4e0d9c0750000000000000010017aec77c4b2addd609294ebc0db4cc3fdcb85d76f543390e7a13a5b1487b5d6949fdbf52ba292957193714754779cbf96d16df1d78d5bf8e6f2109956bee78c2d823f131b9e9e35335941140f9000dfaba5217381a03291a07b9244926f7619b2a1dbc6402e459083d6d7dd91378eee"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x80, 0x0}}], 0x2, 0x80) r7 = epoll_create1(0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000100)='./file0\x00', 0x10082, &(0x7f0000000700)={[{@errors_continue}, {@usrquota}, {@nocow}, {@no_splitbrain_check}, {@ratelimit_errors}, {@background_compression={'background_compression', 0x3d, 'lz4'}}, {@inodes_32bit}, {@usrquota}, {@errors_ro}, {@errors_ro}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_gt}, {@euid_gt}]}, 0xfd, 0x590b, &(0x7f000000b200)="$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") r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x1000000, [{0x0, 0x2, 0x1000000}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xe, 0x4}, {0x8, 0x4}, {0x6, 0x8}]}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r11, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x101) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f000086fff4)) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r15, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r14, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r12, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r14, 0x0, 0xffffffffffffffff, 0x1}) [ 89.196950][ T5092] Bluetooth: hci0: command tx timeout [ 90.460151][ T5108] Zero length message leads to an empty skb [ 90.794851][ T5108] loop0: detected capacity change from 0 to 32768 [ 90.962676][ T5108] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,noinodes_use_key_cache,usrquota,no_splitbrain_check,nojournal_transaction_names,nocow [ 90.995781][ T5108] superblock marked clean but clean section not present, fixing [ 91.005225][ T5108] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 91.012299][ T5108] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 91.018050][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 91.022929][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.026931][ T5108] RIP: 0010:bch2_fs_recovery+0x274/0x38b0 [ 91.029185][ T5108] Code: 00 00 4c 89 f7 48 c7 c6 20 72 54 8c e8 85 d6 05 00 eb 41 e8 fe 54 55 fd 49 8d 9d cc 01 00 00 49 83 c7 10 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 fd 9c bc fd 49 8b 0f 4c 89 ef 48 [ 91.035843][ T5108] RSP: 0018:ffffc90002f5f5c0 EFLAGS: 00010202 [ 91.038034][ T5108] RAX: 0000000000000002 RBX: ffff88804cf001cc RCX: 0000000000040000 [ 91.040905][ T5108] RDX: ffffc9000b471000 RSI: 000000000003ffff RDI: 0000000000040000 [ 91.044027][ T5108] RBP: ffffc90002f5f968 R08: ffffffff843e3770 R09: 1ffff920005ebe9c [ 91.047063][ T5108] R10: dffffc0000000000 R11: fffff520005ebe9d R12: dffffc0000000000 [ 91.050176][ T5108] R13: ffff88804cf00000 R14: ffff88804cf00777 R15: 0000000000000010 [ 91.053288][ T5108] FS: 00007fd5e79716c0(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 91.056878][ T5108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.059966][ T5108] CR2: 000055e53652d088 CR3: 000000004b466000 CR4: 0000000000350ef0 [ 91.063351][ T5108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.066694][ T5108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.070602][ T5108] Call Trace: [ 91.072395][ T5108] [ 91.073917][ T5108] ? __die_body+0x88/0xe0 [ 91.077329][ T5108] ? die_addr+0x108/0x140 [ 91.079145][ T5108] ? exc_general_protection+0x3dd/0x5d0 [ 91.081285][ T5108] ? asm_exc_general_protection+0x26/0x30 [ 91.083371][ T5108] ? bch2_fs_recovery+0x220/0x38b0 [ 91.085192][ T5108] ? bch2_fs_recovery+0x274/0x38b0 [ 91.087087][ T5108] ? __lock_acquire+0x137a/0x2040 [ 91.088899][ T5108] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 91.090871][ T5108] ? __pfx_lock_release+0x10/0x10 [ 91.092786][ T5108] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 91.094952][ T5108] ? __pfx_lock_release+0x10/0x10 [ 91.097213][ T5108] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 91.099460][ T5108] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 91.101731][ T5108] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 91.104040][ T5108] ? llist_reverse_order+0x72/0x90 [ 91.106132][ T5108] bch2_fs_start+0x356/0x5b0 [ 91.108035][ T5108] bch2_fs_get_tree+0xd61/0x1700 [ 91.110130][ T5108] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 91.112894][ T5108] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 91.115045][ T5108] ? generic_parse_monolithic+0x387/0x400 [ 91.117321][ T5108] ? apparmor_capable+0x13b/0x1b0 [ 91.119319][ T5108] ? bpf_lsm_capable+0x9/0x10 [ 91.121222][ T5108] vfs_get_tree+0x90/0x2b0 [ 91.123337][ T5108] do_new_mount+0x2be/0xb40 [ 91.125110][ T5108] ? __pfx_do_new_mount+0x10/0x10 [ 91.126923][ T5108] __se_sys_mount+0x2d6/0x3c0 [ 91.128617][ T5108] ? __pfx___se_sys_mount+0x10/0x10 [ 91.130558][ T5108] ? do_syscall_64+0x100/0x230 [ 91.132457][ T5108] ? __x64_sys_mount+0x20/0xc0 [ 91.134316][ T5108] do_syscall_64+0xf3/0x230 [ 91.136161][ T5108] ? clear_bhb_loop+0x35/0x90 [ 91.137875][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.139985][ T5108] RIP: 0033:0x7fd5e6b7f69a [ 91.141572][ T5108] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.148871][ T5108] RSP: 002b:00007fd5e7970e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.152974][ T5108] RAX: ffffffffffffffda RBX: 00007fd5e7970ef0 RCX: 00007fd5e6b7f69a [ 91.156310][ T5108] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007fd5e7970eb0 [ 91.161003][ T5108] RBP: 00000000200058c0 R08: 00007fd5e7970ef0 R09: 0000000000010082 [ 91.165835][ T5108] R10: 0000000000010082 R11: 0000000000000246 R12: 0000000020000100 [ 91.170434][ T5108] R13: 00007fd5e7970eb0 R14: 000000000000590b R15: 0000000020000700 [ 91.174039][ T5108] [ 91.175875][ T5108] Modules linked in: [ 91.266667][ T4532] Bluetooth: hci0: command tx timeout [ 91.376962][ T5108] ---[ end trace 0000000000000000 ]--- [ 91.379969][ T5108] RIP: 0010:bch2_fs_recovery+0x274/0x38b0 [ 91.384284][ T5108] Code: 00 00 4c 89 f7 48 c7 c6 20 72 54 8c e8 85 d6 05 00 eb 41 e8 fe 54 55 fd 49 8d 9d cc 01 00 00 49 83 c7 10 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 fd 9c bc fd 49 8b 0f 4c 89 ef 48 [ 91.414146][ T5108] RSP: 0018:ffffc90002f5f5c0 EFLAGS: 00010202 [ 91.417249][ T5108] RAX: 0000000000000002 RBX: ffff88804cf001cc RCX: 0000000000040000 [ 91.421782][ T5108] RDX: ffffc9000b471000 RSI: 000000000003ffff RDI: 0000000000040000 [ 91.435532][ T5108] RBP: ffffc90002f5f968 R08: ffffffff843e3770 R09: 1ffff920005ebe9c [ 91.441127][ T5108] R10: dffffc0000000000 R11: fffff520005ebe9d R12: dffffc0000000000 [ 91.445043][ T5108] R13: ffff88804cf00000 R14: ffff88804cf00777 R15: 0000000000000010 [ 91.460130][ T5108] FS: 00007fd5e79716c0(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 91.464910][ T5108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.480942][ T5108] CR2: 000055e53652d088 CR3: 000000004b466000 CR4: 0000000000350ef0 [ 91.483853][ T5108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.496820][ T5108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.500977][ T5108] Kernel panic - not syncing: Fatal exception [ 91.504413][ T5108] Kernel Offset: disabled [ 91.506768][ T5108] Rebooting in 86400 seconds..