program: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f7265636f7665723a7d792c62747265655f6e6f64655f707265669d79d3df2c6572726f72733d636f6e74696e75652c76657273696f6e5f757067726164653d6e6f6e652c73686172645f696e6f64655f6e756d626572732c62747265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f6e2c6669785f6572726f72733d6e6f2c726561645f6f6e6c79"], 0x1, 0x593c, &(0x7f0000000140)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x9}}]}, 0x38}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000305ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10], 0x40}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000005b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005b80)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005c40)={'syztnl1\x00', &(0x7f0000005bc0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x7, 0xc, 0x1, @empty, @private0, 0x8000, 0x8000, 0xffff, 0x40}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005c80)={'pimreg\x00', 0x0}) (async) r15 = socket(0x10, 0x3, 0x0) r16 = socket(0x27, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r16) (async) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r15, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=@newqdisc={0x40, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7fff, 0x0, 0x5}}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=@newtfilter={0x524, 0x28, 0xc2f, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0xffe0}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4f4, 0x2, [@TCA_CGROUP_POLICE={0x4cc, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1622a28e}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8cae}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xee2, 0xffff, 0x90, 0xfffffffc, 0x9501, 0x200, 0x990, 0x7, 0x7fff, 0x0, 0x3059771a, 0x4, 0x3, 0x7, 0x5ae, 0x43f24fd1, 0x8, 0x9, 0x80, 0x9, 0x9, 0x4, 0x1, 0x2, 0x3, 0x2, 0x2, 0x4934, 0x7, 0x4, 0x9, 0x4df721da, 0x3b95, 0x7, 0x400, 0x0, 0x100000, 0x4, 0x9, 0x2, 0xffffff80, 0xd, 0x6, 0x7, 0xc7, 0x2, 0xfffffffc, 0xffff, 0x8, 0x7, 0x9b, 0x8000000, 0x3, 0x40, 0x4, 0x7, 0x7fffffff, 0xffffffff, 0x1, 0xf, 0x0, 0x7, 0x4, 0x5, 0x893c, 0x5, 0x7fff, 0x5, 0xa, 0x3, 0x1, 0xb6, 0x6, 0x1, 0x101, 0x3, 0x200, 0x9, 0x6, 0xffffffff, 0x76b, 0xfffffff8, 0x8, 0xffff89ec, 0xf13, 0xd, 0x6, 0xfffffffd, 0xfffffffd, 0x8, 0x40, 0x9494, 0x8001, 0x9, 0xfffffff6, 0x8000, 0x0, 0x1ff, 0x9, 0xac, 0x2, 0x6, 0x5, 0xfa, 0x8, 0x4, 0xf, 0x7ff, 0x401, 0x9, 0x0, 0xfffffff9, 0x8001, 0x7, 0x7, 0x0, 0x7ac, 0x400047, 0x9, 0x8, 0x7, 0x8, 0x1c456bb4, 0x7e, 0x3, 0x3, 0x5, 0x0, 0x1, 0x91, 0xfff, 0xffffffff, 0x9, 0xd0, 0x9, 0x5, 0x0, 0x2, 0x10000, 0x7ff, 0x2, 0x1ff, 0x5, 0x1, 0x952, 0x3, 0x9, 0x101, 0x9, 0x200, 0x10, 0x1b, 0x8cf6, 0x8, 0x5c0c1616, 0x3, 0x4, 0x80, 0xffffffff, 0x1, 0xd, 0x7, 0xa0e, 0x3ff, 0x2, 0xfffff486, 0xaa, 0x8, 0x7, 0x7, 0x400, 0x2ee, 0x4, 0x2, 0x9, 0xf0b, 0x80000000, 0x4, 0x3, 0x2, 0x4, 0x0, 0x6, 0xc, 0x5, 0x8, 0xc, 0x2, 0x5c1, 0x2, 0x8, 0x3ff, 0x4, 0x426, 0x6, 0x8, 0x5, 0x4, 0xbd, 0x1ff, 0x4, 0x0, 0x8, 0x9, 0x3ff, 0x2d8d, 0x2, 0xd, 0x1, 0x7fffffff, 0x63, 0x3ff, 0xa, 0x48d4, 0xb2, 0x800, 0x8, 0x5, 0x7, 0x8, 0x1, 0x6, 0x6, 0xff, 0x80, 0xfffff800, 0x3, 0x1, 0x8, 0x9, 0x8, 0x80000000, 0x2, 0x8000, 0x6, 0x4, 0x0, 0x3, 0x7, 0xfffeffff, 0x3, 0x97e, 0x3ff, 0xffffff82, 0x3, 0x8, 0x2, 0x1000, 0x7, 0x2, 0x10, 0xef4d, 0x40, 0x4, 0x80, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x3, 0x1, 0x0, 0x8, {0x7, 0x2, 0xe, 0x8, 0xe8, 0x7fffffff}, {0x5, 0x0, 0x6, 0xfff9, 0xfff}, 0xfffffff4, 0x10000, 0xb2c4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x5, 0x5, 0x7, {0x0, 0x0, 0x296, 0x81, 0x400, 0x5}, {0x6, 0x1, 0xc, 0x1ff, 0x1, 0x6}, 0x9, 0x1ff, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x29829044}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffff4be}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xc000, 0x2, 0x7f}, {0xffff, 0xa, 0x2, "7a0a6fe6bfa0ad168d6f"}}}]}]}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000005cc0)=0x0, &(0x7f0000005d00)=0x4) (async) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=r20, @ANYBLOB="006787d50df6a4ce00000000000034001680300001802c000c80ffff01000000000006000000c0f848e23a7ca84528000100"/64], 0x58}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000005f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005f40)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="10002dbd7000fbdbdf251300000034000180140002006e6574706369300000000000000000001400020070696d367265673000000000000000000800030001000000380001800800030004000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="140002006e657464657673696d300000000000000c00018008000300010000006000018008000100", @ANYRES32=r10, @ANYBLOB="080003000200000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="00040000c4d2b5bd31cd93259945beb997b7ecb2afabb57547bd49bf3ee05a450b4ebfba40634703f41e714103bfe8085f09919569ec8cb48ab4fc34e7bda36213429bf9f505383bb8e877f48fb6214189dc", @ANYRES32=r14, @ANYBLOB="080003000100000014000200626f6e645f736c6176655f3100000000080003000000000008000300000000002000018008000100", @ANYRES32=r17, @ANYBLOB="140002006c6f00000000000000000000000000004c00018008000300030000001400020076657468305f746f5f6272696467650008000300000000001400020065727370616e3000000000000000000008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 74.455591][ T4666] Bluetooth: hci0: command tx timeout [ 74.796348][ T5317] loop0: detected capacity change from 0 to 32768 [ 74.926126][ T5317] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,gc_reserve_bytes=4.00 PiB,fix_errors=no,nojournal_transaction_names,version_upgrade=none [ 74.926144][ T5317] allowing incompatible features above 0.0: (unknown version) [ 74.926150][ T5317] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.947686][ T5317] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 74.951876][ T5317] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 74.957072][ T5317] bcachefs (loop0): Version upgrade required: [ 74.957072][ T5317] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 74.957072][ T5317] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 74.957072][ T5317] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 75.033750][ T5317] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 75.033781][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 75.033790][ T5317] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.033794][ T5317] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 75.033799][ T5317] repair success (rewriting node) [ 75.058632][ T5317] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 75.058647][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 75.058655][ T5317] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.058661][ T5317] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 75.058669][ T5317] repair success (rewriting node) [ 75.084582][ T5317] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 75.084597][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 75.084605][ T5317] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.084611][ T5317] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 75.084618][ T5317] loop0 node offset 16/24 bset u64s 36: checksum error, type none: got should be [ 75.084624][ T5317] flagging btree dirents lost data [ 75.084629][ T5317] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.084635][ T5317] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.084641][ T5317] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 75.084648][ T5317] ret fsck_errors_not_fixed [ 75.129004][ T5317] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 75.135245][ T5317] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 75.135257][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 75.135266][ T5317] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.135274][ T5317] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 75.135281][ T5317] repair success (rewriting node) [ 75.159414][ T5317] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 75.159428][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 75.159436][ T5317] loop0 node offset 0/24: bad magic: want 59513f585d347cd2, got 590003585d347cd2 [ 75.159443][ T5317] flagging btree alloc lost data [ 75.159449][ T5317] ret btree_node_read_validate_error [ 75.179162][ T5317] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 75.185198][ T5317] bcachefs (loop0): btree node read error at btree subvolumes level 0/0 [ 75.185219][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 75.185227][ T5317] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.185235][ T5317] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 75.185243][ T5317] repair success (rewriting node) [ 75.210510][ T5317] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 75.210523][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3000000 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 75.210531][ T5317] loop0 node offset 0/16: got wrong btree node: got [ 75.210538][ T5317] btree=snapshots level=0 seq ebb8d5a9e3463bdb 1 [ 75.210544][ T5317] min: POS_MIN [ 75.210549][ T5317] max: SPOS_MAX [ 75.210555][ T5317] flagging btree snapshots lost data [ 75.210561][ T5317] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 75.210568][ T5317] ret btree_node_read_validate_error [ 75.242164][ T5317] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 75.249778][ T5317] bcachefs (loop0): btree node read error at btree lru level 0/0 [ 75.249792][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 75.249801][ T5317] loop0 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.249808][ T5317] loop0 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 75.249815][ T5317] repair success (rewriting node) [ 75.273680][ T5317] bcachefs (loop0): btree node read error at btree freespace level 0/0 [ 75.273693][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 75.273701][ T5317] loop0 node offset 0/32 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.273708][ T5317] loop0 node offset 0/32 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/32 [ 75.273715][ T5317] node offset 8/32 bset u64s 35 bset byte offset 120: keys out of order: u64s 5 type set 0:34359738397:0 len 2 ver 0 > u64s 5 type set 0:32:0 len 2 ver 0 [ 75.273722][ T5317] repair success (rewriting node) [ 75.303775][ T5317] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 75.303789][ T5317] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 75.303798][ T5317] loop0 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 75.303804][ T5317] loop0 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 75.303811][ T5317] repair success (rewriting node) [ 75.331963][ T5317] bcachefs (loop0): check_topology... [ 75.332132][ T5317] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 75.339003][ T5317] bcachefs (loop0): no nodes found for btree dirents, continuing [ 75.342843][ T5317] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 75.348054][ T5317] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 75.352486][ T5317] done [ 75.353704][ T5317] bcachefs (loop0): accounting_read... done [ 75.357786][ T5317] bcachefs (loop0): alloc_read... done [ 75.360472][ T5317] bcachefs (loop0): snapshots_read... done [ 75.363444][ T5317] bcachefs (loop0): check_allocations... [ 75.364887][ T5317] bcachefs (loop0): pointer to nonexistent device 1 [ 75.372304][ T5317] bcachefs (loop0): pointer to missing device 1 [ 75.372322][ T5317] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 0 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 1:8704 gen 1, fixing [ 75.383463][ T5317] bcachefs (loop0): pointer to nonexistent device 1 [ 75.388521][ T5317] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 75.388534][ T5317] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0, fixing [ 75.401361][ T5317] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 75.401375][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 75.414791][ T5317] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 75.414803][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 75.429533][ T5317] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 75.429548][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 75.441984][ T5317] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 75.441998][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 75.453530][ T5317] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 75.453543][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 75.465269][ T5317] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 75.465282][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 75.490928][ T5317] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 75.490937][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 75.511754][ T5317] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 75.511767][ T5317] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 75.530987][ T5317] done [ 75.532461][ T5317] bcachefs (loop0): going read-write [ 75.656006][ T5317] bcachefs (loop0): journal_replay... [ 75.663221][ T5317] bcachefs (loop0): entry in freespace btree for nonexistant dev:bucket 0:33554475, fixing [ 75.672449][ T5317] bcachefs (loop0): entry in freespace btree for nonexistant dev:bucket 0:33554476, fixing [ 75.678097][ T5317] bcachefs (loop0): entry in freespace btree for nonexistant dev:bucket 0:33554477, fixing [ 75.681932][ T5317] ================================================================== [ 75.685083][ T5317] BUG: KASAN: slab-use-after-free in bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 75.688511][ T5317] Read of size 8 at addr ffff888054d7ca98 by task syz.0.0/5317 [ 75.691462][ T5317] [ 75.692401][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 75.692412][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.692416][ T5317] Call Trace: [ 75.692422][ T5317] [ 75.692426][ T5317] dump_stack_lvl+0x189/0x250 [ 75.692444][ T5317] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.692455][ T5317] ? rcu_is_watching+0x15/0xb0 [ 75.692471][ T5317] ? __kasan_check_byte+0x12/0x40 [ 75.692483][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.692496][ T5317] ? rcu_is_watching+0x15/0xb0 [ 75.692511][ T5317] ? lock_release+0x4b/0x3e0 [ 75.692526][ T5317] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.692536][ T5317] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.692546][ T5317] print_report+0xd2/0x2b0 [ 75.692560][ T5317] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 75.692574][ T5317] kasan_report+0x118/0x150 [ 75.692586][ T5317] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 75.692601][ T5317] bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 75.692614][ T5317] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 75.692628][ T5317] ? __pfx_bch2_bucket_alloc_trans+0x10/0x10 [ 75.692643][ T5317] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 75.692657][ T5317] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 75.692670][ T5317] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 75.692686][ T5317] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 75.692700][ T5317] ? __open_bucket_add_buckets+0x783/0x1e40 [ 75.692717][ T5317] __open_bucket_add_buckets+0x1437/0x1e40 [ 75.692737][ T5317] open_bucket_add_buckets+0x2ee/0x440 [ 75.692752][ T5317] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 75.692768][ T5317] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 75.692836][ T5317] bch2_btree_reserve_get+0x641/0x1810 [ 75.692855][ T5317] ? __pfx_bch2_btree_reserve_get+0x10/0x10 [ 75.692872][ T5317] ? __pfx___bch2_disk_reservation_add+0x10/0x10 [ 75.692886][ T5317] ? bch2_btree_update_start+0xadb/0x1dc0 [ 75.692902][ T5317] bch2_btree_update_start+0x147e/0x1dc0 [ 75.692945][ T5317] ? bch2_btree_split_leaf+0x14b/0x8e0 [ 75.692963][ T5317] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 75.692978][ T5317] ? bch2_journal_replay_key+0x44f/0xb10 [ 75.692994][ T5317] ? bch2_path_put+0x1b6/0x15d0 [ 75.693010][ T5317] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 75.693021][ T5317] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 75.693036][ T5317] bch2_btree_split_leaf+0x14b/0x8e0 [ 75.693053][ T5317] bch2_trans_commit_error+0x1b7/0x1130 [ 75.693065][ T5317] ? bch2_journal_replay+0x1789/0x2620 [ 75.693081][ T5317] ? six_unlock_ip+0x302/0x430 [ 75.693091][ T5317] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 75.693102][ T5317] ? bch2_trans_unlock_updates_write+0xc22/0xd50 [ 75.693118][ T5317] __bch2_trans_commit+0x1ce8/0x8880 [ 75.693136][ T5317] ? bch2_journal_replay+0x1789/0x2620 [ 75.693151][ T5317] ? bch2_journal_replay_key+0x636/0xb10 [ 75.693165][ T5317] ? __pfx___bch2_trans_commit+0x10/0x10 [ 75.693178][ T5317] ? __pfx_bch2_journal_replay_key+0x10/0x10 [ 75.693194][ T5317] ? bch2_journal_replay_key+0x1dc/0xb10 [ 75.693209][ T5317] ? __bch2_trans_get+0x9c2/0xd80 [ 75.693222][ T5317] bch2_journal_replay+0x1789/0x2620 [ 75.693246][ T5317] ? __pfx_console_unlock+0x10/0x10 [ 75.693257][ T5317] ? irq_work_queue+0xbc/0x140 [ 75.693271][ T5317] ? __wake_up_klogd+0xd9/0x110 [ 75.693284][ T5317] ? __pfx_vprintk_emit+0x10/0x10 [ 75.693294][ T5317] ? __pfx_bch2_journal_replay+0x10/0x10 [ 75.693311][ T5317] ? do_raw_spin_lock+0x121/0x290 [ 75.693324][ T5317] ? __bch2_print+0x176/0x220 [ 75.693340][ T5317] ? __pfx___bch2_print+0x10/0x10 [ 75.693356][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.693369][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.693385][ T5317] __bch2_run_recovery_passes+0x392/0x1010 [ 75.693400][ T5317] bch2_run_recovery_passes+0x184/0x210 [ 75.693412][ T5317] bch2_fs_recovery+0x25fd/0x3950 [ 75.693427][ T5317] ? check_noncircular+0xe0/0x160 [ 75.693439][ T5317] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.693458][ T5317] ? __lock_acquire+0xab9/0xd20 [ 75.693474][ T5317] ? __lock_acquire+0xab9/0xd20 [ 75.693490][ T5317] ? __lock_acquire+0xab9/0xd20 [ 75.693508][ T5317] ? bch2_fs_start+0x9fe/0xd90 [ 75.693516][ T5317] ? up_write+0x1c4/0x420 [ 75.693522][ T5317] ? bch2_fs_start+0x5c4/0xd90 [ 75.693528][ T5317] bch2_fs_start+0xa99/0xd90 [ 75.693535][ T5317] ? bch2_fs_start+0x5c4/0xd90 [ 75.693544][ T5317] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.693557][ T5317] ? sget+0x267/0x620 [ 75.693573][ T5317] bch2_fs_get_tree+0xb02/0x14f0 [ 75.693597][ T5317] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.693616][ T5317] ? aa_get_newest_label+0xf7/0x5d0 [ 75.693630][ T5317] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.693645][ T5317] ? apparmor_capable+0x137/0x1b0 [ 75.693663][ T5317] vfs_get_tree+0x92/0x2b0 [ 75.693673][ T5317] do_new_mount+0x24a/0xa40 [ 75.693686][ T5317] __se_sys_mount+0x317/0x410 [ 75.693699][ T5317] ? __pfx___se_sys_mount+0x10/0x10 [ 75.693712][ T5317] ? do_syscall_64+0xbe/0x3b0 [ 75.693727][ T5317] ? __x64_sys_mount+0x20/0xc0 [ 75.693739][ T5317] do_syscall_64+0xfa/0x3b0 [ 75.693754][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.693767][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.693778][ T5317] ? clear_bhb_loop+0x60/0xb0 [ 75.693790][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.693800][ T5317] RIP: 0033:0x7f1df1b900ca [ 75.693812][ T5317] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.693821][ T5317] RSP: 002b:00007f1df2941e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.693835][ T5317] RAX: ffffffffffffffda RBX: 00007f1df2941ef0 RCX: 00007f1df1b900ca [ 75.693843][ T5317] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f1df2941eb0 [ 75.693850][ T5317] RBP: 0000200000000000 R08: 00007f1df2941ef0 R09: 0000000000010000 [ 75.693858][ T5317] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000000040 [ 75.693865][ T5317] R13: 00007f1df2941eb0 R14: 000000000000593c R15: 0000200000005a80 [ 75.693875][ T5317] [ 75.693879][ T5317] [ 75.939130][ T5317] Allocated by task 5317: [ 75.941063][ T5317] kasan_save_track+0x3e/0x80 [ 75.943061][ T5317] __kasan_kmalloc+0x93/0xb0 [ 75.945043][ T5317] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 75.947815][ T5317] krealloc_noprof+0x124/0x340 [ 75.949832][ T5317] __bch2_trans_kmalloc+0x26c/0xc80 [ 75.952037][ T5317] bch2_alloc_sectors_start_trans+0x1d59/0x1e80 [ 75.954714][ T5317] bch2_btree_reserve_get+0x641/0x1810 [ 75.957114][ T5317] bch2_btree_update_start+0x147e/0x1dc0 [ 75.959518][ T5317] bch2_btree_split_leaf+0x14b/0x8e0 [ 75.961790][ T5317] bch2_trans_commit_error+0x1b7/0x1130 [ 75.964110][ T5317] __bch2_trans_commit+0x1ce8/0x8880 [ 75.966356][ T5317] bch2_journal_replay+0x1789/0x2620 [ 75.968630][ T5317] __bch2_run_recovery_passes+0x392/0x1010 [ 75.971093][ T5317] bch2_run_recovery_passes+0x184/0x210 [ 75.973396][ T5317] bch2_fs_recovery+0x25fd/0x3950 [ 75.975539][ T5317] bch2_fs_start+0xa99/0xd90 [ 75.977519][ T5317] bch2_fs_get_tree+0xb02/0x14f0 [ 75.979644][ T5317] vfs_get_tree+0x92/0x2b0 [ 75.981576][ T5317] do_new_mount+0x24a/0xa40 [ 75.983514][ T5317] __se_sys_mount+0x317/0x410 [ 75.985596][ T5317] do_syscall_64+0xfa/0x3b0 [ 75.987641][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.990224][ T5317] [ 75.991291][ T5317] Freed by task 5317: [ 75.993049][ T5317] kasan_save_track+0x3e/0x80 [ 75.995032][ T5317] kasan_save_free_info+0x46/0x50 [ 75.997326][ T5317] __kasan_slab_free+0x62/0x70 [ 75.999436][ T5317] kfree+0x18e/0x440 [ 76.001194][ T5317] krealloc_noprof+0x1cd/0x340 [ 76.003174][ T5317] __bch2_trans_kmalloc+0x26c/0xc80 [ 76.005565][ T5317] __bch2_trans_subbuf_alloc+0x2da/0x460 [ 76.007955][ T5317] bch2_trans_log_str+0xd5/0x3c0 [ 76.010048][ T5317] __bch2_fsck_err+0xc11/0xfb0 [ 76.012122][ T5317] bch2_check_discard_freespace_key+0x569/0xce0 [ 76.014756][ T5317] bch2_bucket_alloc_trans+0x1333/0x2410 [ 76.017244][ T5317] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 76.019712][ T5317] __open_bucket_add_buckets+0x1437/0x1e40 [ 76.022264][ T5317] open_bucket_add_buckets+0x2ee/0x440 [ 76.024649][ T5317] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 76.027410][ T5317] bch2_btree_reserve_get+0x641/0x1810 [ 76.029831][ T5317] bch2_btree_update_start+0x147e/0x1dc0 [ 76.032288][ T5317] bch2_btree_split_leaf+0x14b/0x8e0 [ 76.034701][ T5317] bch2_trans_commit_error+0x1b7/0x1130 [ 76.037075][ T5317] __bch2_trans_commit+0x1ce8/0x8880 [ 76.039289][ T5317] bch2_journal_replay+0x1789/0x2620 [ 76.041631][ T5317] __bch2_run_recovery_passes+0x392/0x1010 [ 76.044087][ T5317] bch2_run_recovery_passes+0x184/0x210 [ 76.046502][ T5317] bch2_fs_recovery+0x25fd/0x3950 [ 76.048665][ T5317] bch2_fs_start+0xa99/0xd90 [ 76.050659][ T5317] bch2_fs_get_tree+0xb02/0x14f0 [ 76.052840][ T5317] vfs_get_tree+0x92/0x2b0 [ 76.054797][ T5317] do_new_mount+0x24a/0xa40 [ 76.056821][ T5317] __se_sys_mount+0x317/0x410 [ 76.058887][ T5317] do_syscall_64+0xfa/0x3b0 [ 76.060843][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.063399][ T5317] [ 76.064448][ T5317] The buggy address belongs to the object at ffff888054d7c800 [ 76.064448][ T5317] which belongs to the cache kmalloc-1k of size 1024 [ 76.070306][ T5317] The buggy address is located 664 bytes inside of [ 76.070306][ T5317] freed 1024-byte region [ffff888054d7c800, ffff888054d7cc00) [ 76.075948][ T5317] [ 76.077046][ T5317] The buggy address belongs to the physical page: [ 76.079852][ T5317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54d7c [ 76.083704][ T5317] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.087233][ T5317] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 76.090424][ T5317] page_type: f5(slab) [ 76.092139][ T5317] raw: 04fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 76.095968][ T5317] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 76.099635][ T5317] head: 04fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 76.103211][ T5317] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 76.106921][ T5317] head: 04fff00000000002 ffffea0001535f01 00000000ffffffff 00000000ffffffff [ 76.110672][ T5317] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 76.114315][ T5317] page dumped because: kasan: bad access detected [ 76.117049][ T5317] page_owner tracks the page as allocated [ 76.119438][ T5317] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5317, tgid 5316 (syz.0.0), ts 75662029323, free_ts 75660278359 [ 76.127721][ T5317] post_alloc_hook+0x240/0x2a0 [ 76.129855][ T5317] get_page_from_freelist+0x21e4/0x22c0 [ 76.132357][ T5317] __alloc_frozen_pages_noprof+0x181/0x370 [ 76.134862][ T5317] alloc_pages_mpol+0x232/0x4a0 [ 76.137036][ T5317] allocate_slab+0x8a/0x3b0 [ 76.138989][ T5317] ___slab_alloc+0xbfc/0x1480 [ 76.143286][ T5317] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 76.146023][ T5317] krealloc_noprof+0x124/0x340 [ 76.148040][ T5317] bch2_printbuf_make_room+0x1f5/0x360 [ 76.150364][ T5317] bch2_prt_printf+0x282/0x740 [ 76.152424][ T5317] __bch2_trans_paths_to_text+0xe5/0x190 [ 76.154795][ T5317] bch2_trans_update_max_paths+0x14e/0x340 [ 76.157422][ T5317] btree_path_alloc+0x89a/0xa70 [ 76.159400][ T5317] __bch2_btree_path_make_mut+0x1cc/0x520 [ 76.161843][ T5317] __bch2_btree_path_set_pos+0x3f8/0x1530 [ 76.164353][ T5317] bch2_path_get+0xf82/0x1540 [ 76.166364][ T5317] page last free pid 5317 tgid 5316 stack trace: [ 76.169021][ T5317] __free_frozen_pages+0xc71/0xe70 [ 76.171244][ T5317] stack_depot_save_flags+0x445/0x900 [ 76.173604][ T5317] kasan_save_track+0x4f/0x80 [ 76.175733][ T5317] __kasan_kmalloc+0x93/0xb0 [ 76.177970][ T5317] __kmalloc_noprof+0x27a/0x4f0 [ 76.180073][ T5317] mempool_alloc_noprof+0x1a7/0x510 [ 76.182379][ T5317] bch2_btree_update_start+0x572/0x1dc0 [ 76.184796][ T5317] bch2_btree_split_leaf+0x14b/0x8e0 [ 76.187132][ T5317] bch2_trans_commit_error+0x1b7/0x1130 [ 76.189613][ T5317] __bch2_trans_commit+0x1ce8/0x8880 [ 76.191917][ T5317] bch2_journal_replay+0x1789/0x2620 [ 76.194051][ T5317] __bch2_run_recovery_passes+0x392/0x1010 [ 76.196548][ T5317] bch2_run_recovery_passes+0x184/0x210 [ 76.198797][ T5317] bch2_fs_recovery+0x25fd/0x3950 [ 76.200942][ T5317] bch2_fs_start+0xa99/0xd90 [ 76.203150][ T5317] bch2_fs_get_tree+0xb02/0x14f0 [ 76.205291][ T5317] [ 76.206366][ T5317] Memory state around the buggy address: [ 76.208795][ T5317] ffff888054d7c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.212579][ T5317] ffff888054d7ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.216698][ T5317] >ffff888054d7ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.221165][ T5317] ^ [ 76.223984][ T5317] ffff888054d7cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.228326][ T5317] ffff888054d7cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.232347][ T5317] ================================================================== [ 76.249643][ T5317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.252942][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 76.257976][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.262879][ T5317] Call Trace: [ 76.264333][ T5317] [ 76.265630][ T5317] dump_stack_lvl+0x99/0x250 [ 76.267536][ T5317] ? __asan_memcpy+0x40/0x70 [ 76.269594][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.272306][ T5317] ? __pfx__printk+0x10/0x10 [ 76.274239][ T5317] panic+0x2db/0x790 [ 76.275956][ T5317] ? __pfx_panic+0x10/0x10 [ 76.277905][ T5317] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 76.280284][ T5317] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.283074][ T5317] ? print_memory_metadata+0x314/0x400 [ 76.285535][ T5317] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 76.288108][ T5317] check_panic_on_warn+0x89/0xb0 [ 76.290220][ T5317] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 76.292655][ T5317] end_report+0x78/0x160 [ 76.294442][ T5317] kasan_report+0x129/0x150 [ 76.296364][ T5317] ? bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 76.298793][ T5317] bch2_bucket_alloc_trans+0x1aa0/0x2410 [ 76.301228][ T5317] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 76.303625][ T5317] ? __pfx_bch2_bucket_alloc_trans+0x10/0x10 [ 76.306180][ T5317] ? bch2_bucket_alloc_trans+0xcb4/0x2410 [ 76.308585][ T5317] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 76.311284][ T5317] bch2_bucket_alloc_set_trans+0x5a6/0xe70 [ 76.313789][ T5317] ? bch2_bucket_alloc_set_trans+0x1eb/0xe70 [ 76.316328][ T5317] ? __open_bucket_add_buckets+0x783/0x1e40 [ 76.318835][ T5317] __open_bucket_add_buckets+0x1437/0x1e40 [ 76.321320][ T5317] open_bucket_add_buckets+0x2ee/0x440 [ 76.323625][ T5317] bch2_alloc_sectors_start_trans+0xd26/0x1e80 [ 76.326257][ T5317] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 76.328592][ T5317] bch2_btree_reserve_get+0x641/0x1810 [ 76.330935][ T5317] ? __pfx_bch2_btree_reserve_get+0x10/0x10 [ 76.333422][ T5317] ? __pfx___bch2_disk_reservation_add+0x10/0x10 [ 76.336289][ T5317] ? bch2_btree_update_start+0xadb/0x1dc0 [ 76.338702][ T5317] bch2_btree_update_start+0x147e/0x1dc0 [ 76.341054][ T5317] ? bch2_btree_split_leaf+0x14b/0x8e0 [ 76.343625][ T5317] ? __pfx_bch2_btree_update_start+0x10/0x10 [ 76.346336][ T5317] ? bch2_journal_replay_key+0x44f/0xb10 [ 76.348704][ T5317] ? bch2_path_put+0x1b6/0x15d0 [ 76.350727][ T5317] ? bch2_btree_path_peek_slot+0x3f4/0xfe0 [ 76.353252][ T5317] ? bch2_journal_keys_peek_slot+0x100/0x190 [ 76.355861][ T5317] bch2_btree_split_leaf+0x14b/0x8e0 [ 76.358188][ T5317] bch2_trans_commit_error+0x1b7/0x1130 [ 76.360552][ T5317] ? bch2_journal_replay+0x1789/0x2620 [ 76.362788][ T5317] ? six_unlock_ip+0x302/0x430 [ 76.364761][ T5317] ? __pfx_bch2_trans_commit_error+0x10/0x10 [ 76.367351][ T5317] ? bch2_trans_unlock_updates_write+0xc22/0xd50 [ 76.370113][ T5317] __bch2_trans_commit+0x1ce8/0x8880 [ 76.372428][ T5317] ? bch2_journal_replay+0x1789/0x2620 [ 76.374803][ T5317] ? bch2_journal_replay_key+0x636/0xb10 [ 76.377139][ T5317] ? __pfx___bch2_trans_commit+0x10/0x10 [ 76.379483][ T5317] ? __pfx_bch2_journal_replay_key+0x10/0x10 [ 76.382057][ T5317] ? bch2_journal_replay_key+0x1dc/0xb10 [ 76.384397][ T5317] ? __bch2_trans_get+0x9c2/0xd80 [ 76.386528][ T5317] bch2_journal_replay+0x1789/0x2620 [ 76.388759][ T5317] ? __pfx_console_unlock+0x10/0x10 [ 76.390902][ T5317] ? irq_work_queue+0xbc/0x140 [ 76.392884][ T5317] ? __wake_up_klogd+0xd9/0x110 [ 76.394964][ T5317] ? __pfx_vprintk_emit+0x10/0x10 [ 76.397118][ T5317] ? __pfx_bch2_journal_replay+0x10/0x10 [ 76.399485][ T5317] ? do_raw_spin_lock+0x121/0x290 [ 76.401581][ T5317] ? __bch2_print+0x176/0x220 [ 76.403577][ T5317] ? __pfx___bch2_print+0x10/0x10 [ 76.405713][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.407934][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.410154][ T5317] __bch2_run_recovery_passes+0x392/0x1010 [ 76.412625][ T5317] bch2_run_recovery_passes+0x184/0x210 [ 76.414899][ T5317] bch2_fs_recovery+0x25fd/0x3950 [ 76.417018][ T5317] ? check_noncircular+0xe0/0x160 [ 76.419102][ T5317] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 76.421336][ T5317] ? __lock_acquire+0xab9/0xd20 [ 76.423381][ T5317] ? __lock_acquire+0xab9/0xd20 [ 76.425290][ T5317] ? __lock_acquire+0xab9/0xd20 [ 76.427289][ T5317] ? bch2_fs_start+0x9fe/0xd90 [ 76.429388][ T5317] ? up_write+0x1c4/0x420 [ 76.431180][ T5317] ? bch2_fs_start+0x5c4/0xd90 [ 76.433241][ T5317] bch2_fs_start+0xa99/0xd90 [ 76.435166][ T5317] ? bch2_fs_start+0x5c4/0xd90 [ 76.437338][ T5317] ? __pfx_bch2_fs_start+0x10/0x10 [ 76.439443][ T5317] ? sget+0x267/0x620 [ 76.441240][ T5317] bch2_fs_get_tree+0xb02/0x14f0 [ 76.443407][ T5317] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 76.445707][ T5317] ? aa_get_newest_label+0xf7/0x5d0 [ 76.447957][ T5317] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 76.451051][ T5317] ? apparmor_capable+0x137/0x1b0 [ 76.453811][ T5317] vfs_get_tree+0x92/0x2b0 [ 76.456074][ T5317] do_new_mount+0x24a/0xa40 [ 76.458237][ T5317] __se_sys_mount+0x317/0x410 [ 76.460206][ T5317] ? __pfx___se_sys_mount+0x10/0x10 [ 76.462413][ T5317] ? do_syscall_64+0xbe/0x3b0 [ 76.464463][ T5317] ? __x64_sys_mount+0x20/0xc0 [ 76.466568][ T5317] do_syscall_64+0xfa/0x3b0 [ 76.468450][ T5317] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.470724][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.473422][ T5317] ? clear_bhb_loop+0x60/0xb0 [ 76.475372][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.477889][ T5317] RIP: 0033:0x7f1df1b900ca [ 76.479748][ T5317] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.487597][ T5317] RSP: 002b:00007f1df2941e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.491252][ T5317] RAX: ffffffffffffffda RBX: 00007f1df2941ef0 RCX: 00007f1df1b900ca [ 76.494725][ T5317] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f1df2941eb0 [ 76.498177][ T5317] RBP: 0000200000000000 R08: 00007f1df2941ef0 R09: 0000000000010000 [ 76.502133][ T5317] R10: 0000000000010000 R11: 0000000000000246 R12: 0000200000000040 [ 76.505465][ T5317] R13: 00007f1df2941eb0 R14: 000000000000593c R15: 0000200000005a80 [ 76.508612][ T5317] [ 76.510330][ T5317] Kernel Offset: disabled [ 76.512295][ T5317] Rebooting in 86400 seconds..