program: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xb1, 0x7, 0xc, 0xad42}, {0x6, 0x1, 0x7, 0x7}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000000)='./file0\x00', 0xcc, &(0x7f00000000c0)=ANY=[@ANYBLOB="61fb1b765d173571e85986648e046745f45ab506ffc357b020264ff2c3bd062318570309cb8a63e195330ffbfb3ffdaab7eb6bbdde6bbad91369226f10e17495a1c48abcf65d521d6ac50eda09cdaaf9ba4160a7595b6c2c68f94df60d3889c2e119f5ffe4d3b82e1607206f9d957c70806b9fc49b7efff7a03eb7876bc4d281039ce380c8fa93b8d97414ad1b9c329ddbb112642cdd2356", @ANYRES32], 0x0, 0x5937, &(0x7f000000b280)="$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") [ 75.769248][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.771879][ T4671] Bluetooth: hci0: command tx timeout [ 75.776929][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.112894][ T5324] loop0: detected capacity change from 0 to 32768 [ 76.117184][ T5324] ======================================================= [ 76.117184][ T5324] WARNING: The mand mount option has been deprecated and [ 76.117184][ T5324] and is ignored by this kernel. Remove the mand [ 76.117184][ T5324] option from the mount to silence this warning. [ 76.117184][ T5324] ======================================================= [ 76.145109][ T5324] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-45ca-8265-f50d00000000) [ 76.379819][ T5324] bcachefs (loop0): starting version 0.775: (unknown version) opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 76.386296][ T5324] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.399342][ T5324] bcachefs (loop0): error validating btree node at btree extents level 0/0 [ 76.399366][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.399379][ T5324] node offset 0/16 bset u64s 0: bset version 1031 newer than superblock version 775, shutting down [ 76.412409][ T5324] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10 [ 76.416563][ T5324] bcachefs (loop0): flagging btree extents lost data [ 76.423100][ T5324] error reading btree root extents l=0: btree_node_read_error, shutting down [ 76.426107][ T5324] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 76.428942][ T5324] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 76.432383][ T5324] bcachefs (loop0): shutting down [ 76.448317][ T5324] bcachefs (loop0): shutdown complete [ 76.453208][ T72] ================================================================== [ 76.456607][ T72] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 76.459677][ T72] Read of size 8 at addr ffff8880409fa0b0 by task kworker/u4:4/72 [ 76.462657][ T72] [ 76.463630][ T72] CPU: 0 UID: 0 PID: 72 Comm: kworker/u4:4 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 76.468053][ T72] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.472126][ T72] Workqueue: loop0 loop_rootcg_workfn [ 76.473970][ T72] Call Trace: [ 76.475272][ T72] [ 76.476457][ T72] dump_stack_lvl+0x241/0x360 [ 76.478407][ T72] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.480368][ T72] ? __pfx__printk+0x10/0x10 [ 76.482055][ T72] ? _printk+0xd5/0x120 [ 76.483322][ T72] ? __virt_addr_valid+0x183/0x530 [ 76.484897][ T72] ? __virt_addr_valid+0x183/0x530 [ 76.486707][ T72] print_report+0x169/0x550 [ 76.488207][ T72] ? __virt_addr_valid+0x183/0x530 [ 76.490025][ T72] ? __virt_addr_valid+0x183/0x530 [ 76.491846][ T72] ? __virt_addr_valid+0x45f/0x530 [ 76.493802][ T72] ? __phys_addr+0xba/0x170 [ 76.495645][ T72] ? percpu_ref_put+0xda/0x250 [ 76.497386][ T72] kasan_report+0x143/0x180 [ 76.499159][ T72] ? percpu_ref_put+0xda/0x250 [ 76.501002][ T72] ? percpu_ref_put+0x1f/0x250 [ 76.502921][ T72] percpu_ref_put+0xda/0x250 [ 76.504666][ T72] blk_update_request+0x5e5/0x1160 [ 76.506631][ T72] blk_mq_end_request+0x3e/0x70 [ 76.508354][ T72] loop_process_work+0x1c10/0x2170 [ 76.510239][ T72] ? __pfx_loop_process_work+0x10/0x10 [ 76.512363][ T72] ? register_lock_class+0x102/0x980 [ 76.514508][ T72] ? __pfx_register_lock_class+0x10/0x10 [ 76.516578][ T72] ? mark_lock+0x9a/0x360 [ 76.518173][ T72] ? debug_object_deactivate+0x2d5/0x390 [ 76.520271][ T72] ? __pfx_lock_acquire+0x10/0x10 [ 76.522199][ T72] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.524510][ T72] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.526964][ T72] ? process_scheduled_works+0x976/0x1850 [ 76.529079][ T72] process_scheduled_works+0xa63/0x1850 [ 76.531090][ T72] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.533455][ T72] ? assign_work+0x364/0x3d0 [ 76.535255][ T72] worker_thread+0x870/0xd30 [ 76.537075][ T72] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 76.539317][ T72] ? __kthread_parkme+0x169/0x1d0 [ 76.541168][ T72] ? __pfx_worker_thread+0x10/0x10 [ 76.543062][ T72] kthread+0x2f0/0x390 [ 76.544577][ T72] ? __pfx_worker_thread+0x10/0x10 [ 76.546556][ T72] ? __pfx_kthread+0x10/0x10 [ 76.548239][ T72] ret_from_fork+0x4b/0x80 [ 76.549995][ T72] ? __pfx_kthread+0x10/0x10 [ 76.551807][ T72] ret_from_fork_asm+0x1a/0x30 [ 76.553532][ T72] [ 76.554753][ T72] [ 76.555744][ T72] Allocated by task 5324: [ 76.557423][ T72] kasan_save_track+0x3f/0x80 [ 76.559457][ T72] __kasan_kmalloc+0x98/0xb0 [ 76.561246][ T72] __kmalloc_cache_noprof+0x19c/0x2c0 [ 76.563323][ T72] __bch2_dev_alloc+0x57/0xa60 [ 76.565136][ T72] bch2_dev_alloc+0xd4/0x170 [ 76.566996][ T72] bch2_fs_open+0x2e3f/0x2f80 [ 76.568779][ T72] bch2_fs_get_tree+0x738/0x1710 [ 76.570612][ T72] vfs_get_tree+0x90/0x2b0 [ 76.572192][ T72] do_new_mount+0x2be/0xb40 [ 76.573899][ T72] __se_sys_mount+0x2d6/0x3c0 [ 76.575710][ T72] do_syscall_64+0xf3/0x230 [ 76.577460][ T72] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.579658][ T72] [ 76.580529][ T72] Freed by task 5324: [ 76.582037][ T72] kasan_save_track+0x3f/0x80 [ 76.583774][ T72] kasan_save_free_info+0x40/0x50 [ 76.585753][ T72] __kasan_slab_free+0x59/0x70 [ 76.587576][ T72] kfree+0x1a0/0x440 [ 76.589029][ T72] kobject_put+0x22f/0x480 [ 76.590790][ T72] bch2_fs_free+0x27b/0x3c0 [ 76.592526][ T72] bch2_fs_get_tree+0xd9f/0x1710 [ 76.594406][ T72] vfs_get_tree+0x90/0x2b0 [ 76.596125][ T72] do_new_mount+0x2be/0xb40 [ 76.597770][ T72] __se_sys_mount+0x2d6/0x3c0 [ 76.599468][ T72] do_syscall_64+0xf3/0x230 [ 76.601200][ T72] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.603197][ T72] [ 76.604181][ T72] The buggy address belongs to the object at ffff8880409fa000 [ 76.604181][ T72] which belongs to the cache kmalloc-4k of size 4096 [ 76.609146][ T72] The buggy address is located 176 bytes inside of [ 76.609146][ T72] freed 4096-byte region [ffff8880409fa000, ffff8880409fb000) [ 76.614273][ T72] [ 76.615197][ T72] The buggy address belongs to the physical page: [ 76.617640][ T72] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x409f8 [ 76.620854][ T72] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.623909][ T72] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 76.626971][ T72] page_type: f5(slab) [ 76.628594][ T72] raw: 04fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 76.631905][ T72] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 76.635184][ T72] head: 04fff00000000040 ffff88801ac42140 0000000000000000 dead000000000001 [ 76.638426][ T72] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 76.641670][ T72] head: 04fff00000000003 ffffea0001027e01 ffffffffffffffff 0000000000000000 [ 76.644989][ T72] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 76.648322][ T72] page dumped because: kasan: bad access detected [ 76.650815][ T72] page_owner tracks the page as allocated [ 76.653031][ T72] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5293, tgid 5293 (syz-executor), ts 66280144044, free_ts 65025793331 [ 76.660184][ T72] post_alloc_hook+0x1f3/0x230 [ 76.661879][ T72] get_page_from_freelist+0x3649/0x3790 [ 76.663963][ T72] __alloc_pages_noprof+0x292/0x710 [ 76.665835][ T72] alloc_pages_mpol_noprof+0x3e8/0x680 [ 76.667795][ T72] alloc_slab_page+0x6a/0x140 [ 76.669614][ T72] allocate_slab+0x5a/0x2f0 [ 76.671327][ T72] ___slab_alloc+0xcd1/0x14b0 [ 76.672982][ T72] __slab_alloc+0x58/0xa0 [ 76.674575][ T72] __kmalloc_noprof+0x25a/0x400 [ 76.676360][ T72] tomoyo_realpath_from_path+0xcf/0x5e0 [ 76.678446][ T72] tomoyo_check_open_permission+0x255/0x500 [ 76.680688][ T72] security_file_open+0x777/0x990 [ 76.682642][ T72] do_dentry_open+0x369/0x1460 [ 76.684482][ T72] vfs_open+0x3e/0x330 [ 76.686094][ T72] path_openat+0x2c84/0x3590 [ 76.687878][ T72] do_filp_open+0x235/0x490 [ 76.689563][ T72] page last free pid 5305 tgid 5305 stack trace: [ 76.691700][ T72] free_unref_page+0xdf9/0x1140 [ 76.693539][ T72] __put_partials+0xeb/0x130 [ 76.695290][ T72] put_cpu_partial+0x17c/0x250 [ 76.697138][ T72] __slab_free+0x2ea/0x3d0 [ 76.698691][ T72] qlist_free_all+0x9a/0x140 [ 76.700455][ T72] kasan_quarantine_reduce+0x14f/0x170 [ 76.702726][ T72] __kasan_slab_alloc+0x23/0x80 [ 76.704850][ T72] kmem_cache_alloc_noprof+0x135/0x2a0 [ 76.707313][ T72] getname_flags+0xb7/0x540 [ 76.709271][ T72] do_sys_openat2+0xd2/0x1d0 [ 76.711241][ T72] __x64_sys_openat+0x247/0x2a0 [ 76.713189][ T72] do_syscall_64+0xf3/0x230 [ 76.715259][ T72] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.717757][ T72] [ 76.718761][ T72] Memory state around the buggy address: [ 76.720636][ T72] ffff8880409f9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.723714][ T72] ffff8880409fa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.726618][ T72] >ffff8880409fa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.729383][ T72] ^ [ 76.731349][ T72] ffff8880409fa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.734215][ T72] ffff8880409fa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.737188][ T72] ================================================================== [ 76.756024][ T72] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.759036][ T72] CPU: 0 UID: 0 PID: 72 Comm: kworker/u4:4 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 76.762733][ T72] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.766179][ T72] Workqueue: loop0 loop_rootcg_workfn [ 76.768007][ T72] Call Trace: [ 76.769281][ T72] [ 76.770565][ T72] dump_stack_lvl+0x241/0x360 [ 76.772415][ T72] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.774481][ T72] ? __pfx__printk+0x10/0x10 [ 76.776275][ T72] ? preempt_schedule+0xe1/0xf0 [ 76.778182][ T72] ? vscnprintf+0x5d/0x90 [ 76.779817][ T72] panic+0x349/0x880 [ 76.781298][ T72] ? check_panic_on_warn+0x21/0xb0 [ 76.783169][ T72] ? __pfx_panic+0x10/0x10 [ 76.784747][ T72] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 76.786728][ T72] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.788978][ T72] ? print_report+0x502/0x550 [ 76.790793][ T72] check_panic_on_warn+0x86/0xb0 [ 76.792494][ T72] ? percpu_ref_put+0xda/0x250 [ 76.794443][ T72] end_report+0x77/0x160 [ 76.796337][ T72] kasan_report+0x154/0x180 [ 76.798383][ T72] ? percpu_ref_put+0xda/0x250 [ 76.800486][ T72] ? percpu_ref_put+0x1f/0x250 [ 76.802247][ T72] percpu_ref_put+0xda/0x250 [ 76.803957][ T72] blk_update_request+0x5e5/0x1160 [ 76.805872][ T72] blk_mq_end_request+0x3e/0x70 [ 76.807709][ T72] loop_process_work+0x1c10/0x2170 [ 76.809562][ T72] ? __pfx_loop_process_work+0x10/0x10 [ 76.811463][ T72] ? register_lock_class+0x102/0x980 [ 76.813389][ T72] ? __pfx_register_lock_class+0x10/0x10 [ 76.815404][ T72] ? mark_lock+0x9a/0x360 [ 76.816993][ T72] ? debug_object_deactivate+0x2d5/0x390 [ 76.819103][ T72] ? __pfx_lock_acquire+0x10/0x10 [ 76.821040][ T72] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.823379][ T72] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.825849][ T72] ? process_scheduled_works+0x976/0x1850 [ 76.827988][ T72] process_scheduled_works+0xa63/0x1850 [ 76.830208][ T72] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.832499][ T72] ? assign_work+0x364/0x3d0 [ 76.834304][ T72] worker_thread+0x870/0xd30 [ 76.836103][ T72] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 76.838319][ T72] ? __kthread_parkme+0x169/0x1d0 [ 76.840159][ T72] ? __pfx_worker_thread+0x10/0x10 [ 76.842175][ T72] kthread+0x2f0/0x390 [ 76.843678][ T72] ? __pfx_worker_thread+0x10/0x10 [ 76.845628][ T72] ? __pfx_kthread+0x10/0x10 [ 76.847351][ T72] ret_from_fork+0x4b/0x80 [ 76.848981][ T72] ? __pfx_kthread+0x10/0x10 [ 76.850679][ T72] ret_from_fork_asm+0x1a/0x30 [ 76.852441][ T72] [ 76.853881][ T72] Kernel Offset: disabled [ 76.855488][ T72] Rebooting in 86400 seconds..