program: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x8, 0x80000001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000100)={0xdb, 0x0, 0xf9a}) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0)=0x40000081, 0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x818001, &(0x7f0000000300)=ANY=[@ANYBLOB="7265636f766572795f706073735f6c6173743d636865636b5f616c6c6f635f746f5f6c72755f726566732c6d756d3d6372633332632c6572726f72733d636f6e74696e75652c696e6c696e655f646174613c7374725f686173683d736970686163682c6e6f6368616e6765732c6e6f636f772c6e6f6578636c2c6e6f636f772c009de64b13c7fe6458bcd6d2d7793dd0d582fa215cdb447daefca877f332de059c1ce3af538bd2704deba5435b74a9d2603c05922ff0efdfdcde03b87b29fa1c67cc652304af76370c95a26cb157"], 0x1, 0x59b9, &(0x7f0000005dc0)="$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") [ 75.785918][ T5298] Bluetooth: hci0: command tx timeout [ 76.151288][ T5318] loop0: detected capacity change from 0 to 32768 [ 76.285705][ T5318] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,nocow [ 76.285719][ T5318] allowing incompatible features above 0.0: (unknown version) [ 76.285723][ T5318] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 76.305504][ T5318] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 76.311071][ T5318] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 76.318233][ T5318] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 76.318252][ T5318] has non ptr field, deleting [ 76.332288][ T5318] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.335626][ T5318] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 76.335626][ T5318] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 76.335626][ T5318] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 76.416557][ T5318] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 360287970189639680:536870912:U32_MAX len 0 ver 0: [ 76.416585][ T5318] mode=100755 [ 76.416592][ T5318] flags=(15300000) [ 76.416598][ T5318] journal_seq=0 [ 76.416603][ T5318] hash_seed=8469d717004af4ef [ 76.416609][ T5318] hash_type=siphash [ 76.416615][ T5318] bi_size=10 [ 76.416620][ T5318] bi_sectors=8 [ 76.416625][ T5318] bi_version=0 [ 76.416630][ T5318] bi_atime=2780562352 [ 76.416635][ T5318] bi_ctime=2780562352 [ 76.416640][ T5318] bi_mtime=2780562352 [ 76.416645][ T5318] bi_otime=2780562352 [ 76.416650][ T5318] bi_uid=0 [ 76.416654][ T5318] bi_gid=0 [ 76.416659][ T5318] bi_nlink=0 [ 76.416664][ T5318] bi_generation=0 [ 76.416668][ T5318] bi_dev=0 [ 76.416673][ T5318] bi_data_checksum=0 [ 76.416678][ T5318] bi_compression=0 [ 76.416683][ T5318] bi_project=0 [ 76.416687][ T5318] bi_background_compression=0 [ 76.416692][ T5318] bi_data_replicas=0 [ 76.416697][ T5318] bi_promote_target=0 [ 76.416702][ T5318] bi_foreground_target=0 [ 76.416707][ T5318] bi_background_target=0 [ 76.416712][ T5318] bi_erasure_code=0 [ 76.416717][ T5318] bi_fields_set=0 [ 76.416721][ T5318] bi_dir=4096 [ 76.416725][ T5318] bi_dir_offset=4330382808765833931 [ 76.416730][ T5318] bi_subvol=0 [ 76.416733][ T5318] bi_parent_subvol=0 [ 76.416737][ T5318] bi_nocow=0 [ 76.416741][ T5318] bi_depth=0 [ 76.416745][ T5318] bi_inodes_32bit=0 [ 76.416748][ T5318] bi_casefold=0 [ 76.416753][ T5318] nonzero k.p.inode, deleting [ 76.428597][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.428667][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.508649][ T5318] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 76.515589][ T5318] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 76.515621][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 76.515630][ T5318] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 1 too large: 18446744073709551615 + 512 > 18446744073709551615 [ 76.515639][ T5318] u64s 3 fields 64:0, 64:512, 32:0, 0:0, 0:0, 0:0 [ 76.515645][ T5318] flagging btree alloc lost data [ 76.515652][ T5318] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 76.515659][ T5318] ret btree_node_read_validate_error [ 76.554228][ T5318] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 76.561290][ T5318] bcachefs (loop0): btree node read error at btree subvolumes level 0/0 [ 76.561304][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 76.561312][ T5318] loop0 node offset 0/16 bset u64s 0: invalid bkey format: field 2 too large: 18446744073709551615 + 0 > 4294967295 [ 76.561319][ T5318] u64s 3 fields 64:0, 64:0, 64:0, 0:0, 0:0, 0:0 [ 76.561325][ T5318] flagging btree subvolumes lost data [ 76.561331][ T5318] ret btree_node_read_validate_error [ 76.589941][ T5318] bcachefs (loop0): error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 76.598317][ T5318] bcachefs (loop0): invalid bkey in btree_node btree=freespace level=0: u64s 5 type 129 0:32:0 len 0 ver 0 [ 76.598332][ T5318] size == 0, deleting [ 76.605345][ T5318] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 76.614073][ T5318] bcachefs (loop0): check_topology... [ 76.614184][ T5318] bcachefs (loop0): btree root inodes unreadable, must recover from scan [ 76.620907][ T5318] bcachefs (loop0): no nodes found for btree inodes, continuing [ 76.624679][ T5318] bcachefs (loop0): btree root subvolumes unreadable, must recover from scan [ 76.629353][ T5318] bcachefs (loop0): no nodes found for btree subvolumes, continuing [ 76.633524][ T5318] done [ 76.634782][ T5318] bcachefs (loop0): accounting_read... done [ 76.639086][ T5318] bcachefs (loop0): alloc_read... done [ 76.641646][ T5318] bcachefs (loop0): snapshots_read... done [ 76.648387][ T5318] bcachefs (loop0): check_allocations... [ 76.650982][ T5318] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 76.651008][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.676076][ T5318] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 76.676091][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 76.691153][ T5318] bcachefs (loop0): bucket 0:32 gen 0 different types of data in same bucket: journal, btree [ 76.691167][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 76.706204][ T5318] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 76.706214][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 76.718393][ T5318] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 76.718407][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 76.730591][ T5318] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 76.730623][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 76.748079][ T5318] done [ 76.749534][ T5318] bcachefs (loop0): going read-write [ 76.884881][ T5318] bcachefs (loop0): journal_replay... [ 76.896846][ T1038] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 76.896871][ T1038] u64s 5 type deleted 0:13:0 len 0 ver 0, , continuing [ 76.945002][ T71] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 76.945017][ T71] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 76.959482][ T5318] done [ 76.961162][ T5318] bcachefs (loop0): check_alloc_info... [ 76.964307][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 76.964330][ T5318] device 0 buckets 9-13, fixing [ 76.983311][ T1038] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 76.983326][ T1038] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 76.991258][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 76.991271][ T5318] device 0 buckets 14-16, fixing [ 76.998545][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 76.998558][ T5318] device 0 buckets 25-28, fixing [ 77.004034][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 77.004045][ T5318] device 0 buckets 30-32, fixing [ 77.011536][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 77.011547][ T5318] device 0 buckets 33-36, fixing [ 77.017859][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 77.017870][ T5318] device 0 buckets 38-41, fixing [ 77.023287][ T5318] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 77.023297][ T5318] device 0 buckets 43-120, fixing [ 77.030878][ T5318] done [ 77.032488][ T5318] bcachefs (loop0): check_lrus... [ 77.033517][ T5318] bcachefs (loop0): incorrect lru entry: lru fragmentation time 134217728 [ 77.033528][ T5318] u64s 5 type set 18446462598867058688:6597069766690:0 len 0 ver 0 [ 77.033534][ T5318] for u64s 5 type deleted 0:6597069766690:0 len 0 ver 0, fixing [ 77.047071][ T5318] done [ 77.049226][ T5318] bcachefs (loop0): check_backpointers_to_extents... done [ 77.054462][ T5318] bcachefs (loop0): check_extents_to_backpointers... [ 77.055073][ T5318] bcachefs (loop0): scanning for missing backpointers in 3/128 buckets [ 77.061803][ T5318] done [ 77.063581][ T5318] bcachefs (loop0): check_subvols... done [ 77.066641][ T5318] bcachefs (loop0): check_inodes... done [ 77.070896][ T5318] bcachefs (loop0): check_dirents... [ 77.077556][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 4134255327993914801 [ 77.077569][ T5318] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 77.858660][ T5298] Bluetooth: hci0: command tx timeout [ 78.099414][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 2185735843250685154 [ 78.099432][ T5318] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 78.110156][ T5318] bcachefs (loop0): dirent points to missing inode: [ 78.110164][ T5318] u64s 7 type dirent 4096:2185735843250685154:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 78.118236][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 1529811482976218970 [ 78.118252][ T5318] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 78.128304][ T5318] bcachefs (loop0): dirent points to missing inode: [ 78.128317][ T5318] u64s 7 type dirent 4096:4134255327993914801:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 78.136014][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 8676171919230399936 [ 78.136027][ T5318] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 78.145440][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 6207999544756445552 [ 78.145454][ T5318] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 78.155959][ T5318] bcachefs (loop0): dirent points to missing inode: [ 78.155970][ T5318] u64s 7 type dirent 4096:8676171919230399936:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 78.164950][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 4432445513877233038 [ 78.164963][ T5318] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 78.175355][ T5318] bcachefs (loop0): fsck counted subdirectories wrong for inum 4096:4294967295: got 2 should be 1 [ 78.181071][ T5318] bcachefs (loop0): directory 4096:4294967295 with wrong i_nlink: got 0, should be 1, fixing [ 78.186893][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 8138045556672330195 [ 78.186906][ T5318] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing [ 79.139646][ T5318] bcachefs (loop0): dirent points to missing inode: [ 79.139661][ T5318] u64s 7 type dirent 4098:8138045556672330195:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing [ 79.148378][ T5318] bcachefs (loop0): hash table key at wrong offset: should be at 7827191358122469718 [ 79.148392][ T5318] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing [ 79.157727][ T5318] bcachefs (loop0): check_dirents requires second pass [ 79.161059][ T5318] bcachefs (loop0): dirent points to missing inode: [ 79.161069][ T5318] u64s 7 type dirent 4096:1529811482976218970:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 79.169772][ T5318] bcachefs (loop0): dirent points to missing inode: [ 79.169784][ T5318] u64s 8 type dirent 4096:4432445513877233038:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 79.178317][ T5318] bcachefs (loop0): dirent points to missing inode: [ 79.178329][ T5318] u64s 8 type dirent 4096:6207999544756445552:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 79.186213][ T5318] bcachefs (loop0): dirent points to missing inode: [ 79.186226][ T5318] u64s 7 type dirent 4098:7827191358122469718:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing [ 79.937781][ T4666] Bluetooth: hci0: command tx timeout [ 80.178136][ T5318] ================================================================== [ 80.181662][ T5318] BUG: KASAN: use-after-free in bch2_check_dirents+0x1efd/0x3390 [ 80.185063][ T5318] Read of size 1 at addr ffff888054f44048 by task syz.0.0/5318 [ 80.188303][ T5318] [ 80.189302][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 80.189314][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.189321][ T5318] Call Trace: [ 80.189329][ T5318] [ 80.189334][ T5318] dump_stack_lvl+0x189/0x250 [ 80.189352][ T5318] ? __virt_addr_valid+0x1c8/0x5c0 [ 80.189364][ T5318] ? rcu_is_watching+0x15/0xb0 [ 80.189378][ T5318] ? __kasan_check_byte+0x12/0x40 [ 80.189389][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.189404][ T5318] ? rcu_is_watching+0x15/0xb0 [ 80.189416][ T5318] ? lock_release+0x4b/0x3e0 [ 80.189432][ T5318] ? __virt_addr_valid+0x1c8/0x5c0 [ 80.189441][ T5318] ? __virt_addr_valid+0x4a5/0x5c0 [ 80.189450][ T5318] print_report+0xd2/0x2b0 [ 80.189465][ T5318] ? bch2_check_dirents+0x1efd/0x3390 [ 80.189479][ T5318] kasan_report+0x118/0x150 [ 80.189490][ T5318] ? bch2_check_dirents+0x1efd/0x3390 [ 80.189506][ T5318] bch2_check_dirents+0x1efd/0x3390 [ 80.189523][ T5318] ? bch2_check_dirents+0x2ea/0x3390 [ 80.189537][ T5318] ? desc_read+0x1b8/0x3f0 [ 80.189552][ T5318] ? prb_first_seq+0xfd/0x1a0 [ 80.189567][ T5318] ? __pfx_bch2_check_dirents+0x10/0x10 [ 80.189580][ T5318] ? __pfx_prb_first_seq+0x10/0x10 [ 80.189595][ T5318] ? desc_read+0x1b8/0x3f0 [ 80.189609][ T5318] ? this_cpu_in_panic+0x4f/0x80 [ 80.189621][ T5318] ? _prb_read_valid+0xa07/0xa90 [ 80.189637][ T5318] ? console_flush_all+0x13a/0xc40 [ 80.189647][ T5318] ? up+0xde/0x150 [ 80.189703][ T5318] ? __console_unlock+0x14c/0x1a0 [ 80.189712][ T5318] ? __pfx___console_unlock+0x10/0x10 [ 80.189726][ T5318] ? prb_read_valid+0x3c/0x60 [ 80.189739][ T5318] ? console_unlock+0x21b/0x270 [ 80.189748][ T5318] ? __pfx_console_unlock+0x10/0x10 [ 80.189761][ T5318] ? vprintk_emit+0x63e/0x7a0 [ 80.189775][ T5318] ? __bch2_print+0x176/0x220 [ 80.189790][ T5318] ? bch2_check_dirents+0x2ea/0x3390 [ 80.189806][ T5318] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.189817][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.189833][ T5318] __bch2_run_recovery_passes+0x395/0x1010 [ 80.189848][ T5318] bch2_run_recovery_passes+0x184/0x210 [ 80.189858][ T5318] bch2_fs_recovery+0x25fd/0x3950 [ 80.189873][ T5318] ? check_noncircular+0xe0/0x160 [ 80.189885][ T5318] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 80.189903][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.189918][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.189931][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.189950][ T5318] ? bch2_fs_start+0x9fe/0xd90 [ 80.189960][ T5318] ? up_write+0x1c4/0x420 [ 80.189970][ T5318] ? bch2_fs_start+0x5c4/0xd90 [ 80.189980][ T5318] bch2_fs_start+0xa99/0xd90 [ 80.189989][ T5318] ? bch2_fs_start+0x5c4/0xd90 [ 80.189998][ T5318] ? __pfx_bch2_fs_start+0x10/0x10 [ 80.190017][ T5318] ? sget+0x267/0x620 [ 80.190030][ T5318] bch2_fs_get_tree+0xb02/0x14f0 [ 80.190051][ T5318] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 80.190069][ T5318] ? aa_get_newest_label+0xf7/0x5d0 [ 80.190083][ T5318] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 80.190097][ T5318] ? apparmor_capable+0x137/0x1b0 [ 80.190113][ T5318] vfs_get_tree+0x8f/0x2b0 [ 80.190123][ T5318] do_new_mount+0x24a/0xa40 [ 80.190135][ T5318] __se_sys_mount+0x317/0x410 [ 80.190148][ T5318] ? __pfx___se_sys_mount+0x10/0x10 [ 80.190159][ T5318] ? do_syscall_64+0xbe/0x3b0 [ 80.190167][ T5318] ? __x64_sys_mount+0x20/0xc0 [ 80.190180][ T5318] do_syscall_64+0xfa/0x3b0 [ 80.190188][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.190200][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.190212][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 80.190222][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.190231][ T5318] RIP: 0033:0x7f82b11900ca [ 80.190243][ T5318] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.190252][ T5318] RSP: 002b:00007f82b1f72e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.190265][ T5318] RAX: ffffffffffffffda RBX: 00007f82b1f72ef0 RCX: 00007f82b11900ca [ 80.190272][ T5318] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f82b1f72eb0 [ 80.190278][ T5318] RBP: 00002000000000c0 R08: 00007f82b1f72ef0 R09: 0000000000818001 [ 80.190284][ T5318] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 80.190290][ T5318] R13: 00007f82b1f72eb0 R14: 00000000000059b9 R15: 0000200000000300 [ 80.190301][ T5318] [ 80.190306][ T5318] [ 80.375561][ T5318] The buggy address belongs to the physical page: [ 80.378429][ T5318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54f44 [ 80.382203][ T5318] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 80.385314][ T5318] raw: 04fff00000000000 0000000000000000 ffffea000153d108 0000000000000000 [ 80.389029][ T5318] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.392458][ T5318] page dumped because: kasan: bad access detected [ 80.394889][ T5318] page_owner tracks the page as freed [ 80.397135][ T5318] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x42800(GFP_NOWAIT|__GFP_COMP), pid 5318, tgid 5317 (syz.0.0), ts 78199494120, free_ts 79196148933 [ 80.403995][ T5318] post_alloc_hook+0x240/0x2a0 [ 80.405991][ T5318] get_page_from_freelist+0x21e4/0x22c0 [ 80.408467][ T5318] __alloc_frozen_pages_noprof+0x181/0x370 [ 80.411040][ T5318] __alloc_pages_noprof+0xa/0x30 [ 80.413256][ T5318] ___kmalloc_large_node+0x85/0x210 [ 80.415493][ T5318] __kmalloc_large_node_noprof+0x18/0x90 [ 80.417901][ T5318] __kvmalloc_node_noprof+0x6d/0x5f0 [ 80.420217][ T5318] btree_node_sort+0x666/0x1760 [ 80.422375][ T5318] bch2_btree_post_write_cleanup+0x11f/0xad0 [ 80.424845][ T5318] bch2_btree_node_prep_for_write+0x337/0x650 [ 80.427378][ T5318] bch2_trans_lock_write+0x669/0xba0 [ 80.429678][ T5318] __bch2_trans_commit+0x2829/0x8880 [ 80.431918][ T5318] bch2_str_hash_repair_key+0x2a2d/0x3fa0 [ 80.434392][ T5318] __bch2_str_hash_check_key+0xa65/0xd40 [ 80.436824][ T5318] bch2_check_dirents+0x209b/0x3390 [ 80.439148][ T5318] __bch2_run_recovery_passes+0x395/0x1010 [ 80.441651][ T5318] page last free pid 5318 tgid 5317 stack trace: [ 80.444410][ T5318] __free_pages_ok+0xa44/0xc20 [ 80.446440][ T5318] __folio_put+0x21b/0x2c0 [ 80.448431][ T5318] free_large_kmalloc+0x145/0x200 [ 80.450603][ T5318] btree_node_sort+0x117f/0x1760 [ 80.452699][ T5318] bch2_btree_post_write_cleanup+0x11f/0xad0 [ 80.455297][ T5318] bch2_btree_node_prep_for_write+0x337/0x650 [ 80.457897][ T5318] bch2_trans_lock_write+0x669/0xba0 [ 80.460121][ T5318] __bch2_trans_commit+0x2829/0x8880 [ 80.462350][ T5318] bch2_check_dirents+0x1cdf/0x3390 [ 80.464799][ T5318] __bch2_run_recovery_passes+0x395/0x1010 [ 80.467357][ T5318] bch2_run_recovery_passes+0x184/0x210 [ 80.469872][ T5318] bch2_fs_recovery+0x25fd/0x3950 [ 80.472128][ T5318] bch2_fs_start+0xa99/0xd90 [ 80.474203][ T5318] bch2_fs_get_tree+0xb02/0x14f0 [ 80.476412][ T5318] vfs_get_tree+0x8f/0x2b0 [ 80.478437][ T5318] do_new_mount+0x24a/0xa40 [ 80.480437][ T5318] [ 80.481524][ T5318] Memory state around the buggy address: [ 80.483912][ T5318] ffff888054f43f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.487335][ T5318] ffff888054f43f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.490716][ T5318] >ffff888054f44000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.494174][ T5318] ^ [ 80.497068][ T5318] ffff888054f44080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.500575][ T5318] ffff888054f44100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.504089][ T5318] ================================================================== [ 80.523913][ T5318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.527243][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 80.532589][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.537289][ T5318] Call Trace: [ 80.538845][ T5318] [ 80.540215][ T5318] dump_stack_lvl+0x99/0x250 [ 80.542276][ T5318] ? __asan_memcpy+0x40/0x70 [ 80.544374][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.546607][ T5318] ? __pfx__printk+0x10/0x10 [ 80.548821][ T5318] panic+0x2db/0x790 [ 80.550509][ T5318] ? __pfx_panic+0x10/0x10 [ 80.552462][ T5318] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 80.555029][ T5318] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.557832][ T5318] ? print_memory_metadata+0x314/0x400 [ 80.560179][ T5318] ? bch2_check_dirents+0x1efd/0x3390 [ 80.562525][ T5318] check_panic_on_warn+0x89/0xb0 [ 80.564646][ T5318] ? bch2_check_dirents+0x1efd/0x3390 [ 80.566993][ T5318] end_report+0x78/0x160 [ 80.568871][ T5318] kasan_report+0x129/0x150 [ 80.570881][ T5318] ? bch2_check_dirents+0x1efd/0x3390 [ 80.573245][ T5318] bch2_check_dirents+0x1efd/0x3390 [ 80.575474][ T5318] ? bch2_check_dirents+0x2ea/0x3390 [ 80.577685][ T5318] ? desc_read+0x1b8/0x3f0 [ 80.579457][ T5318] ? prb_first_seq+0xfd/0x1a0 [ 80.581427][ T5318] ? __pfx_bch2_check_dirents+0x10/0x10 [ 80.583886][ T5318] ? __pfx_prb_first_seq+0x10/0x10 [ 80.586128][ T5318] ? desc_read+0x1b8/0x3f0 [ 80.588190][ T5318] ? this_cpu_in_panic+0x4f/0x80 [ 80.590194][ T5318] ? _prb_read_valid+0xa07/0xa90 [ 80.592293][ T5318] ? console_flush_all+0x13a/0xc40 [ 80.594498][ T5318] ? up+0xde/0x150 [ 80.596121][ T5318] ? __console_unlock+0x14c/0x1a0 [ 80.598475][ T5318] ? __pfx___console_unlock+0x10/0x10 [ 80.600865][ T5318] ? prb_read_valid+0x3c/0x60 [ 80.602881][ T5318] ? console_unlock+0x21b/0x270 [ 80.605031][ T5318] ? __pfx_console_unlock+0x10/0x10 [ 80.607363][ T5318] ? vprintk_emit+0x63e/0x7a0 [ 80.609447][ T5318] ? __bch2_print+0x176/0x220 [ 80.611453][ T5318] ? bch2_check_dirents+0x2ea/0x3390 [ 80.613818][ T5318] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.616062][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.618369][ T5318] __bch2_run_recovery_passes+0x395/0x1010 [ 80.620850][ T5318] bch2_run_recovery_passes+0x184/0x210 [ 80.623152][ T5318] bch2_fs_recovery+0x25fd/0x3950 [ 80.625329][ T5318] ? check_noncircular+0xe0/0x160 [ 80.627634][ T5318] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 80.630051][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.632166][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.634197][ T5318] ? __lock_acquire+0xab9/0xd20 [ 80.636342][ T5318] ? bch2_fs_start+0x9fe/0xd90 [ 80.638429][ T5318] ? up_write+0x1c4/0x420 [ 80.640417][ T5318] ? bch2_fs_start+0x5c4/0xd90 [ 80.642503][ T5318] bch2_fs_start+0xa99/0xd90 [ 80.644354][ T5318] ? bch2_fs_start+0x5c4/0xd90 [ 80.646255][ T5318] ? __pfx_bch2_fs_start+0x10/0x10 [ 80.648347][ T5318] ? sget+0x267/0x620 [ 80.649956][ T5318] bch2_fs_get_tree+0xb02/0x14f0 [ 80.652208][ T5318] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 80.654675][ T5318] ? aa_get_newest_label+0xf7/0x5d0 [ 80.657000][ T5318] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 80.659478][ T5318] ? apparmor_capable+0x137/0x1b0 [ 80.661690][ T5318] vfs_get_tree+0x8f/0x2b0 [ 80.663681][ T5318] do_new_mount+0x24a/0xa40 [ 80.665670][ T5318] __se_sys_mount+0x317/0x410 [ 80.667716][ T5318] ? __pfx___se_sys_mount+0x10/0x10 [ 80.669993][ T5318] ? do_syscall_64+0xbe/0x3b0 [ 80.671980][ T5318] ? __x64_sys_mount+0x20/0xc0 [ 80.674169][ T5318] do_syscall_64+0xfa/0x3b0 [ 80.676203][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.678599][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.681291][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 80.683401][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.685986][ T5318] RIP: 0033:0x7f82b11900ca [ 80.687992][ T5318] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.695938][ T5318] RSP: 002b:00007f82b1f72e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.699554][ T5318] RAX: ffffffffffffffda RBX: 00007f82b1f72ef0 RCX: 00007f82b11900ca [ 80.702776][ T5318] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f82b1f72eb0 [ 80.706126][ T5318] RBP: 00002000000000c0 R08: 00007f82b1f72ef0 R09: 0000000000818001 [ 80.709614][ T5318] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 80.713025][ T5318] R13: 00007f82b1f72eb0 R14: 00000000000059b9 R15: 0000200000000300 [ 80.716413][ T5318] [ 80.717892][ T5318] Kernel Offset: disabled [ 80.719789][ T5318] Rebooting in 86400 seconds..