program: prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x5}, 0x10) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000080)={[{@no_splitbrain_check}, {@btree_node_prefetch}, {@norecovery}, {@fsck}, {@norecovery}, {@discard}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'check_dirents'}}, {@reconstruct_alloc}, {@shared_inode_numbers}]}, 0xfe, 0x5968, &(0x7f000000bcc0)="$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") sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) dup(r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x2, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000380)=0x9c) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x0, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9f}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x2, 0x2, 0x1, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x40000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180)={r4}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r11, &(0x7f0000000180), 0x0}, 0x20) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x8, r12) shmdt(r2) [ 59.219415][ T5331] loop0: detected capacity change from 0 to 32768 [ 59.237504][ T5315] Bluetooth: hci0: command tx timeout [ 59.467011][ T5331] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,no_splitbrain_check,fsck,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,reconstruct_alloc [ 59.475989][ T5331] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 59.479871][ T5331] bcachefs (loop0): Version upgrade required: [ 59.479871][ T5331] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 59.479871][ T5331] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 59.479871][ T5331] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 59.514127][ T5331] bcachefs (loop0): dropping and reconstructing all alloc info [ 59.517952][ T5331] invalid btree id 251 (max 63), exiting [ 59.520140][ T5331] bcachefs (loop0): Unable to continue, halting [ 59.522803][ T5331] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 59.525453][ T5331] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 59.529008][ T5331] bcachefs (loop0): shutting down [ 59.543345][ T5331] bcachefs (loop0): shutdown complete [ 59.549537][ T1073] ================================================================== [ 59.552582][ T1073] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 59.555660][ T1073] Read of size 8 at addr ffff88804ff7e0b0 by task kworker/u4:9/1073 [ 59.558631][ T1073] [ 59.559514][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: kworker/u4:9 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 59.563415][ T1073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.567399][ T1073] Workqueue: loop0 loop_rootcg_workfn [ 59.569323][ T1073] Call Trace: [ 59.570491][ T1073] [ 59.571578][ T1073] dump_stack_lvl+0x241/0x360 [ 59.573439][ T1073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.575282][ T1073] ? __pfx__printk+0x10/0x10 [ 59.576967][ T1073] ? _printk+0xd5/0x120 [ 59.578348][ T1073] ? __virt_addr_valid+0x183/0x530 [ 59.580187][ T1073] ? __virt_addr_valid+0x183/0x530 [ 59.581960][ T1073] print_report+0x169/0x550 [ 59.583586][ T1073] ? __virt_addr_valid+0x183/0x530 [ 59.585290][ T1073] ? __virt_addr_valid+0x183/0x530 [ 59.587020][ T1073] ? __virt_addr_valid+0x45f/0x530 [ 59.588769][ T1073] ? __phys_addr+0xba/0x170 [ 59.590263][ T1073] ? percpu_ref_put+0xda/0x250 [ 59.592036][ T1073] kasan_report+0x143/0x180 [ 59.593657][ T1073] ? percpu_ref_put+0xda/0x250 [ 59.595423][ T1073] ? percpu_ref_put+0x1f/0x250 [ 59.597220][ T1073] percpu_ref_put+0xda/0x250 [ 59.599016][ T1073] blk_update_request+0x5e5/0x1160 [ 59.601086][ T1073] blk_mq_end_request+0x3e/0x70 [ 59.602856][ T1073] loop_process_work+0x1c10/0x2170 [ 59.604728][ T1073] ? __pfx_loop_process_work+0x10/0x10 [ 59.606501][ T1073] ? register_lock_class+0x102/0x980 [ 59.608102][ T1073] ? __pfx_register_lock_class+0x10/0x10 [ 59.609962][ T1073] ? mark_lock+0x9a/0x360 [ 59.611311][ T1073] ? debug_object_deactivate+0x2d5/0x390 [ 59.613089][ T1073] ? __pfx_lock_acquire+0x10/0x10 [ 59.614776][ T1073] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.617055][ T1073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.619481][ T1073] ? process_scheduled_works+0x976/0x1850 [ 59.621588][ T1073] process_scheduled_works+0xa63/0x1850 [ 59.623695][ T1073] ? __pfx_process_scheduled_works+0x10/0x10 [ 59.625934][ T1073] ? assign_work+0x364/0x3d0 [ 59.627686][ T1073] worker_thread+0x870/0xd30 [ 59.629347][ T1073] ? __kthread_parkme+0x169/0x1d0 [ 59.631082][ T1073] ? __pfx_worker_thread+0x10/0x10 [ 59.632870][ T1073] kthread+0x2f0/0x390 [ 59.634244][ T1073] ? __pfx_worker_thread+0x10/0x10 [ 59.635839][ T1073] ? __pfx_kthread+0x10/0x10 [ 59.637369][ T1073] ret_from_fork+0x4b/0x80 [ 59.638868][ T1073] ? __pfx_kthread+0x10/0x10 [ 59.640417][ T1073] ret_from_fork_asm+0x1a/0x30 [ 59.642024][ T1073] [ 59.643094][ T1073] [ 59.643986][ T1073] Allocated by task 5331: [ 59.645817][ T1073] kasan_save_track+0x3f/0x80 [ 59.647917][ T1073] __kasan_kmalloc+0x98/0xb0 [ 59.649917][ T1073] __kmalloc_cache_noprof+0x19c/0x2c0 [ 59.652359][ T1073] __bch2_dev_alloc+0x57/0xa60 [ 59.654466][ T1073] bch2_dev_alloc+0xd4/0x170 [ 59.656332][ T1073] bch2_fs_open+0x2e3f/0x2f80 [ 59.658227][ T1073] bch2_fs_get_tree+0x738/0x1710 [ 59.660247][ T1073] vfs_get_tree+0x90/0x2b0 [ 59.662154][ T1073] do_new_mount+0x2be/0xb40 [ 59.664180][ T1073] __se_sys_mount+0x2d6/0x3c0 [ 59.666169][ T1073] do_syscall_64+0xf3/0x230 [ 59.668179][ T1073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.670828][ T1073] [ 59.671924][ T1073] Freed by task 5331: [ 59.673416][ T1073] kasan_save_track+0x3f/0x80 [ 59.675148][ T1073] kasan_save_free_info+0x40/0x50 [ 59.677049][ T1073] __kasan_slab_free+0x59/0x70 [ 59.678924][ T1073] kfree+0x1a0/0x440 [ 59.680495][ T1073] kobject_put+0x22f/0x480 [ 59.682074][ T1073] bch2_fs_free+0x27b/0x3c0 [ 59.683730][ T1073] bch2_fs_get_tree+0xd9f/0x1710 [ 59.685500][ T1073] vfs_get_tree+0x90/0x2b0 [ 59.687082][ T1073] do_new_mount+0x2be/0xb40 [ 59.688771][ T1073] __se_sys_mount+0x2d6/0x3c0 [ 59.690491][ T1073] do_syscall_64+0xf3/0x230 [ 59.692185][ T1073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.694455][ T1073] [ 59.695353][ T1073] The buggy address belongs to the object at ffff88804ff7e000 [ 59.695353][ T1073] which belongs to the cache kmalloc-4k of size 4096 [ 59.700498][ T1073] The buggy address is located 176 bytes inside of [ 59.700498][ T1073] freed 4096-byte region [ffff88804ff7e000, ffff88804ff7f000) [ 59.705307][ T1073] [ 59.706233][ T1073] The buggy address belongs to the physical page: [ 59.708427][ T1073] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ff78 [ 59.711673][ T1073] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 59.714661][ T1073] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 59.717558][ T1073] page_type: f5(slab) [ 59.719166][ T1073] raw: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 59.722023][ T1073] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 59.725191][ T1073] head: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 59.728616][ T1073] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 59.731664][ T1073] head: 04fff00000000003 ffffea00013fde01 ffffffffffffffff 0000000000000000 [ 59.734798][ T1073] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 59.738192][ T1073] page dumped because: kasan: bad access detected [ 59.740729][ T1073] page_owner tracks the page as allocated [ 59.742861][ T1073] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1073, tgid 1073 (kworker/u4:9), ts 59342537175, free_ts 0 [ 59.749829][ T1073] post_alloc_hook+0x1f3/0x230 [ 59.751609][ T1073] get_page_from_freelist+0x3649/0x3790 [ 59.753745][ T1073] __alloc_pages_noprof+0x292/0x710 [ 59.755788][ T1073] alloc_pages_mpol_noprof+0x3e8/0x680 [ 59.757708][ T1073] alloc_slab_page+0x6a/0x140 [ 59.759378][ T1073] allocate_slab+0x5a/0x2f0 [ 59.761043][ T1073] ___slab_alloc+0xcd1/0x14b0 [ 59.762816][ T1073] __slab_alloc+0x58/0xa0 [ 59.764499][ T1073] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 59.766999][ T1073] kmalloc_reserve+0x111/0x2a0 [ 59.768554][ T1073] __alloc_skb+0x1f3/0x440 [ 59.769911][ T1073] nsim_dev_trap_report_work+0x254/0xab0 [ 59.771803][ T1073] process_scheduled_works+0xa63/0x1850 [ 59.773902][ T1073] worker_thread+0x870/0xd30 [ 59.775661][ T1073] kthread+0x2f0/0x390 [ 59.777204][ T1073] ret_from_fork+0x4b/0x80 [ 59.778865][ T1073] page_owner free stack trace missing [ 59.780788][ T1073] [ 59.781717][ T1073] Memory state around the buggy address: [ 59.783812][ T1073] ffff88804ff7df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 59.786840][ T1073] ffff88804ff7e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.789852][ T1073] >ffff88804ff7e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.792811][ T1073] ^ [ 59.794835][ T1073] ffff88804ff7e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.797760][ T1073] ffff88804ff7e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.800622][ T1073] ================================================================== [ 59.813936][ T1073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 59.816699][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: kworker/u4:9 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 59.820618][ T1073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.824404][ T1073] Workqueue: loop0 loop_rootcg_workfn [ 59.826355][ T1073] Call Trace: [ 59.827638][ T1073] [ 59.828748][ T1073] dump_stack_lvl+0x241/0x360 [ 59.830456][ T1073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.832308][ T1073] ? __pfx__printk+0x10/0x10 [ 59.833865][ T1073] ? preempt_schedule+0xe1/0xf0 [ 59.835522][ T1073] ? vscnprintf+0x5d/0x90 [ 59.837063][ T1073] panic+0x349/0x880 [ 59.838492][ T1073] ? check_panic_on_warn+0x21/0xb0 [ 59.840284][ T1073] ? __pfx_panic+0x10/0x10 [ 59.841753][ T1073] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 59.843791][ T1073] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 59.845990][ T1073] ? print_report+0x502/0x550 [ 59.847651][ T1073] check_panic_on_warn+0x86/0xb0 [ 59.849351][ T1073] ? percpu_ref_put+0xda/0x250 [ 59.850956][ T1073] end_report+0x77/0x160 [ 59.852364][ T1073] kasan_report+0x154/0x180 [ 59.853824][ T1073] ? percpu_ref_put+0xda/0x250 [ 59.855354][ T1073] ? percpu_ref_put+0x1f/0x250 [ 59.856900][ T1073] percpu_ref_put+0xda/0x250 [ 59.858410][ T1073] blk_update_request+0x5e5/0x1160 [ 59.860003][ T1073] blk_mq_end_request+0x3e/0x70 [ 59.861510][ T1073] loop_process_work+0x1c10/0x2170 [ 59.863140][ T1073] ? __pfx_loop_process_work+0x10/0x10 [ 59.864872][ T1073] ? register_lock_class+0x102/0x980 [ 59.866612][ T1073] ? __pfx_register_lock_class+0x10/0x10 [ 59.868531][ T1073] ? mark_lock+0x9a/0x360 [ 59.870025][ T1073] ? debug_object_deactivate+0x2d5/0x390 [ 59.872184][ T1073] ? __pfx_lock_acquire+0x10/0x10 [ 59.874034][ T1073] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.876323][ T1073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.878690][ T1073] ? process_scheduled_works+0x976/0x1850 [ 59.880949][ T1073] process_scheduled_works+0xa63/0x1850 [ 59.882973][ T1073] ? __pfx_process_scheduled_works+0x10/0x10 [ 59.885078][ T1073] ? assign_work+0x364/0x3d0 [ 59.886767][ T1073] worker_thread+0x870/0xd30 [ 59.888444][ T1073] ? __kthread_parkme+0x169/0x1d0 [ 59.890305][ T1073] ? __pfx_worker_thread+0x10/0x10 [ 59.892165][ T1073] kthread+0x2f0/0x390 [ 59.893781][ T1073] ? __pfx_worker_thread+0x10/0x10 [ 59.896069][ T1073] ? __pfx_kthread+0x10/0x10 [ 59.897935][ T1073] ret_from_fork+0x4b/0x80 [ 59.899640][ T1073] ? __pfx_kthread+0x10/0x10 [ 59.901306][ T1073] ret_from_fork_asm+0x1a/0x30 [ 59.902873][ T1073] [ 59.904067][ T1073] Kernel Offset: disabled [ 59.905606][ T1073] Rebooting in 86400 seconds..