program: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x400000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x10, 0x81, 0x100000, 0x3f, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0, 0x5986, &(0x7f0000000340)="$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") openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x400000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x10, 0x81, 0x100000, 0x3f, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) (async) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0, 0x5986, &(0x7f0000000340)="$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") (async) [ 73.888566][ T5305] Bluetooth: hci0: command tx timeout [ 74.170971][ T5325] loop0: detected capacity change from 0 to 32768 [ 74.304681][ T5325] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 74.304699][ T5325] allowing incompatible features above 0.0: (unknown version) [ 74.304706][ T5325] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.331472][ T5325] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 74.348945][ T5325] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 74.353203][ T5325] bcachefs (loop0): Version upgrade required: [ 74.353203][ T5325] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 74.353203][ T5325] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 74.353203][ T5325] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 74.452742][ T5325] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 74.452776][ T5325] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 74.452785][ T5325] loop0 node offset 8/24 bset u64s 375: unknown checksum type 4 [ 74.452792][ T5325] flagging btree alloc lost data [ 74.452797][ T5325] ret btree_node_read_validate_error [ 74.477251][ T5325] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 74.485254][ T5325] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol will_delete deleted parent 4294967295 children 0 0 subvol 1 tree 0 [ 74.485283][ T5325] bad parent node (4294967295 <= 4294967295), deleting [ 74.500842][ T5325] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 74.512862][ T5325] bcachefs (loop0): check_topology... [ 74.513223][ T5325] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 74.521560][ T5325] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 74.529158][ T5325] done [ 74.530564][ T5325] bcachefs (loop0): accounting_read... done [ 74.537330][ T5325] bcachefs (loop0): alloc_read... done [ 74.540839][ T5325] bcachefs (loop0): snapshots_read... done [ 74.545139][ T5325] bcachefs (loop0): check_allocations... [ 74.547479][ T5325] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 74.547506][ T5325] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 74.567020][ T5325] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 74.567042][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 74.582310][ T5325] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 74.582327][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 74.597231][ T5325] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 74.597248][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 74.610634][ T5325] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 74.610648][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 74.624244][ T5325] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 74.624260][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 74.638029][ T5325] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 74.638047][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 74.652569][ T5325] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 74.652587][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 74.665888][ T5325] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 74.665903][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 74.678912][ T5325] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 74.678926][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 74.698868][ T5325] done [ 74.701702][ T5325] bcachefs (loop0): going read-write [ 74.743218][ T5325] bcachefs (loop0): journal_replay... done [ 74.775559][ T5325] bcachefs (loop0): check_alloc_info... [ 74.777855][ T5325] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 74.777875][ T5325] device 0 buckets 26-27, fixing [ 74.788768][ T5325] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 74.788781][ T5325] device 0 buckets 32-33, fixing [ 74.797918][ T5325] done [ 74.799992][ T5325] bcachefs (loop0): check_lrus... done [ 74.803291][ T5325] bcachefs (loop0): check_btree_backpointers... done [ 74.809475][ T5325] bcachefs (loop0): check_backpointers_to_extents... done [ 74.817421][ T5325] bcachefs (loop0): check_extents_to_backpointers... [ 74.818169][ T5325] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 74.828202][ T5325] done [ 74.830120][ T5325] bcachefs (loop0): check_alloc_to_lru_refs... done [ 74.835027][ T5325] bcachefs (loop0): bucket_gens_init... done [ 74.847815][ T5325] bcachefs (loop0): reconstruct_snapshots... [ 74.848161][ T5325] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating [ 74.869350][ T5325] done [ 74.871107][ T5325] bcachefs (loop0): check_snapshot_trees... done [ 74.875069][ T5325] bcachefs (loop0): check_snapshots... done [ 74.878766][ T5325] bcachefs (loop0): check_subvols... [ 74.879648][ T5325] bcachefs (loop0): subvolume 1 is not set as snapshot but is not master subvolume, fixing [ 74.890969][ T5325] done [ 74.898024][ T5325] bcachefs (loop0): check_subvol_children... done [ 74.912713][ T5325] bcachefs (loop0): delete_dead_snapshots... done [ 74.916724][ T5325] bcachefs (loop0): check_inodes... [ 74.917668][ T5325] bcachefs (loop0): inode points to missing dirent [ 74.917680][ T5325] inum: 4099:4294967295 [ 74.917685][ T5325] mode=100755 [ 74.917690][ T5325] flags=(15300000) [ 74.917695][ T5325] journal_seq=5 [ 74.917701][ T5325] hash_seed=fc917866faeb7b5b [ 74.917706][ T5325] hash_type=siphash [ 74.917711][ T5325] bi_size=1050 [ 74.917716][ T5325] bi_sectors=8 [ 74.917721][ T5325] bi_version=0 [ 74.917727][ T5325] bi_atime=2770562249 [ 74.917732][ T5325] bi_ctime=2770562249 [ 74.917737][ T5325] bi_mtime=2770562249 [ 74.917742][ T5325] bi_otime=2770562249 [ 74.917747][ T5325] bi_uid=0 [ 74.917754][ T5325] bi_gid=0 [ 74.917759][ T5325] bi_nlink=0 [ 74.917763][ T5325] bi_generation=0 [ 74.917769][ T5325] bi_dev=0 [ 74.917773][ T5325] bi_data_checksum=0 [ 74.917778][ T5325] bi_compression=0 [ 74.917784][ T5325] bi_project=0 [ 74.917789][ T5325] bi_background_compression=0 [ 74.917794][ T5325] bi_data_replicas=0 [ 74.917799][ T5325] bi_promote_target=0 [ 74.917804][ T5325] bi_foreground_target=0 [ 74.917809][ T5325] bi_background_target=0 [ 74.917816][ T5325] bi_erasure_code=0 [ 74.917821][ T5325] bi_fields_set=0 [ 74.917826][ T5325] bi_dir=4098 [ 74.917831][ T5325] bi_dir_offset=8977922886548783724 [ 74.917837][ T5325] bi_subvol=0 [ 74.917841][ T5325] bi_parent_subvol=0 [ 74.917848][ T5325] bi_nocow=0 [ 74.917853][ T5325] bi_depth=0 [ 74.917857][ T5325] bi_inodes_32bit=0 [ 74.917863][ T5325] bi_casefold=0, fixing [ 75.036446][ T5325] bcachefs (loop0): inode points to missing dirent [ 75.036461][ T5325] inum: 4100:4294967295 [ 75.036468][ T5325] mode=120777 [ 75.036472][ T5325] flags=(15300000) [ 75.036476][ T5325] journal_seq=4 [ 75.036480][ T5325] hash_seed=f4891abdd5c0cd85 [ 75.036484][ T5325] hash_type=siphash [ 75.036488][ T5325] bi_size=38 [ 75.036491][ T5325] bi_sectors=8 [ 75.036495][ T5325] bi_version=0 [ 75.036498][ T5325] bi_atime=2770562249 [ 75.036502][ T5325] bi_ctime=2780562352 [ 75.036506][ T5325] bi_mtime=2770562249 [ 75.036509][ T5325] bi_otime=2770562249 [ 75.036513][ T5325] bi_uid=0 [ 75.036516][ T5325] bi_gid=0 [ 75.036520][ T5325] bi_nlink=0 [ 75.036523][ T5325] bi_generation=0 [ 75.036527][ T5325] bi_dev=0 [ 75.036531][ T5325] bi_data_checksum=0 [ 75.036534][ T5325] bi_compression=0 [ 75.036538][ T5325] bi_project=0 [ 75.036542][ T5325] bi_background_compression=0 [ 75.036545][ T5325] bi_data_replicas=0 [ 75.036549][ T5325] bi_promote_target=0 [ 75.036553][ T5325] bi_foreground_target=0 [ 75.036557][ T5325] bi_background_target=0 [ 75.036560][ T5325] bi_erasure_code=0 [ 75.036566][ T5325] bi_fields_set=0 [ 75.036572][ T5325] bi_dir=4098 [ 75.036577][ T5325] bi_dir_offset=5675548428000973578 [ 75.036582][ T5325] bi_subvol=0 [ 75.036588][ T5325] bi_parent_subvol=0 [ 75.036594][ T5325] bi_nocow=0 [ 75.036600][ T5325] bi_depth=0 [ 75.036606][ T5325] bi_inodes_32bit=0 [ 75.036612][ T5325] bi_casefold=0, fixing [ 75.129728][ T5325] bcachefs (loop0): inode points to missing dirent [ 75.129757][ T5325] inum: 536870912:4294967295 [ 75.129764][ T5325] mode=100755 [ 75.129770][ T5325] flags=(15300000) [ 75.129776][ T5325] journal_seq=4 [ 75.129781][ T5325] hash_seed=169d717004af4ef [ 75.129787][ T5325] hash_type=siphash [ 75.129792][ T5325] bi_size=10 [ 75.129796][ T5325] bi_sectors=8 [ 75.129800][ T5325] bi_version=0 [ 75.129803][ T5325] bi_atime=2780562352 [ 75.129807][ T5325] bi_ctime=2780562352 [ 75.129811][ T5325] bi_mtime=2780562352 [ 75.129815][ T5325] bi_otime=2780562352 [ 75.129818][ T5325] bi_uid=0 [ 75.129822][ T5325] bi_gid=0 [ 75.129825][ T5325] bi_nlink=0 [ 75.129829][ T5325] bi_generation=0 [ 75.129833][ T5325] bi_dev=0 [ 75.129838][ T5325] bi_data_checksum=0 [ 75.129844][ T5325] bi_compression=0 [ 75.129849][ T5325] bi_project=0 [ 75.129854][ T5325] bi_background_compression=0 [ 75.129859][ T5325] bi_data_replicas=0 [ 75.129865][ T5325] bi_promote_target=0 [ 75.129870][ T5325] bi_foreground_target=0 [ 75.129876][ T5325] bi_background_target=0 [ 75.129883][ T5325] bi_erasure_code=0 [ 75.129889][ T5325] bi_fields_set=0 [ 75.129894][ T5325] bi_dir=4096 [ 75.129900][ T5325] bi_dir_offset=4330382808765833931 [ 75.129906][ T5325] bi_subvol=0 [ 75.129911][ T5325] bi_parent_subvol=0 [ 75.129917][ T5325] bi_nocow=0 [ 75.129923][ T5325] bi_depth=0 [ 75.129929][ T5325] bi_inodes_32bit=0 [ 75.129934][ T5325] bi_casefold=0, fixing [ 75.216929][ T5325] done [ 75.218778][ T5325] bcachefs (loop0): check_extents... done [ 75.226308][ T5325] bcachefs (loop0): check_indirect_extents... done [ 75.229822][ T5325] bcachefs (loop0): check_dirents... done [ 75.234250][ T5325] bcachefs (loop0): check_xattrs... [ 75.236759][ T5325] bcachefs (loop0): hash table key at wrong offset: should be at 3956802871085096723 [ 75.236773][ T5325] u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.xattr2:xattr2, fixing [ 75.249596][ T5325] ================================================================== [ 75.253093][ T5325] BUG: KASAN: slab-use-after-free in bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.256907][ T5325] Read of size 8 at addr ffff8880557b7328 by task syz.0.0/5325 [ 75.260374][ T5325] [ 75.261515][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 75.261559][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.261567][ T5325] Call Trace: [ 75.261596][ T5325] [ 75.261621][ T5325] dump_stack_lvl+0x189/0x250 [ 75.261690][ T5325] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.261718][ T5325] ? rcu_is_watching+0x15/0xb0 [ 75.261733][ T5325] ? __kasan_check_byte+0x12/0x40 [ 75.261764][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.261781][ T5325] ? rcu_is_watching+0x15/0xb0 [ 75.261797][ T5325] ? lock_release+0x4b/0x3e0 [ 75.261814][ T5325] ? __virt_addr_valid+0x1c8/0x5c0 [ 75.261823][ T5325] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.261835][ T5325] print_report+0xd2/0x2b0 [ 75.261851][ T5325] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.261866][ T5325] kasan_report+0x118/0x150 [ 75.261877][ T5325] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.261894][ T5325] bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.261912][ T5325] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 75.261927][ T5325] ? bch2_str_hash_repair_key+0x573/0x3fa0 [ 75.261944][ T5325] ? __pfx_xattr_cmp_bkey+0x10/0x10 [ 75.261956][ T5325] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 75.261966][ T5325] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 75.261982][ T5325] ? kasan_quarantine_put+0xdd/0x220 [ 75.261997][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.262059][ T5325] ? bch2_printbuf_exit+0x6f/0xb0 [ 75.262070][ T5325] ? kfree+0x18e/0x440 [ 75.262088][ T5325] ? bch2_printbuf_exit+0x6f/0xb0 [ 75.262100][ T5325] ? __bch2_fsck_err+0xd1c/0xfb0 [ 75.262123][ T5325] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 75.262144][ T5325] __bch2_str_hash_check_key+0xa65/0xd40 [ 75.262160][ T5325] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 75.262170][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.262182][ T5325] ? bch2_str_hash_repair_key+0xfdd/0x3fa0 [ 75.262193][ T5325] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 75.262201][ T5325] ? bch2_check_key_has_snapshot+0x73/0x370 [ 75.262209][ T5325] ? bch2_check_key_has_snapshot+0x2af/0x370 [ 75.262217][ T5325] bch2_check_xattrs+0x933/0xcc0 [ 75.262232][ T5325] ? __pfx_bch2_check_xattrs+0x10/0x10 [ 75.262244][ T5325] ? vprintk_emit+0x63e/0x7a0 [ 75.262252][ T5325] ? __pfx_vprintk_emit+0x10/0x10 [ 75.262264][ T5325] ? bch2_check_xattrs+0x1f2/0xcc0 [ 75.262275][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.262287][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.262298][ T5325] __bch2_run_recovery_passes+0x392/0x1010 [ 75.262314][ T5325] bch2_run_recovery_passes+0x184/0x210 [ 75.262325][ T5325] bch2_fs_recovery+0x25fd/0x3950 [ 75.262342][ T5325] ? check_noncircular+0xe0/0x160 [ 75.262355][ T5325] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.262369][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.262381][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.262392][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.262406][ T5325] ? bch2_fs_start+0x9fe/0xd90 [ 75.262414][ T5325] ? up_write+0x1c4/0x420 [ 75.262421][ T5325] ? bch2_fs_start+0x5c4/0xd90 [ 75.262428][ T5325] bch2_fs_start+0xa99/0xd90 [ 75.262438][ T5325] ? bch2_fs_start+0x5c4/0xd90 [ 75.262448][ T5325] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.262465][ T5325] ? sget+0x267/0x620 [ 75.262484][ T5325] bch2_fs_get_tree+0xb02/0x14f0 [ 75.262510][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.262531][ T5325] ? aa_get_newest_label+0xf7/0x5d0 [ 75.262547][ T5325] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.262579][ T5325] ? apparmor_capable+0x137/0x1b0 [ 75.262591][ T5325] vfs_get_tree+0x8f/0x2b0 [ 75.262603][ T5325] do_new_mount+0x24a/0xa40 [ 75.262613][ T5325] __se_sys_mount+0x317/0x410 [ 75.262623][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 75.262632][ T5325] ? do_syscall_64+0xbe/0x3b0 [ 75.262639][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 75.262647][ T5325] do_syscall_64+0xfa/0x3b0 [ 75.262655][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.262668][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.262680][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 75.262695][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.262707][ T5325] RIP: 0033:0x7f222d1900ca [ 75.262721][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.262732][ T5325] RSP: 002b:00007f22295f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.262747][ T5325] RAX: ffffffffffffffda RBX: 00007f22295f4ef0 RCX: 00007f222d1900ca [ 75.262756][ T5325] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f22295f4eb0 [ 75.262766][ T5325] RBP: 0000200000000140 R08: 00007f22295f4ef0 R09: 0000000000810000 [ 75.262774][ T5325] R10: 0000000000810000 R11: 0000000000000246 R12: 0000200000000000 [ 75.262782][ T5325] R13: 00007f22295f4eb0 R14: 0000000000005986 R15: 0000200000000100 [ 75.262793][ T5325] [ 75.262797][ T5325] [ 75.478686][ T5325] Allocated by task 5325: [ 75.480650][ T5325] kasan_save_track+0x3e/0x80 [ 75.482680][ T5325] __kasan_kmalloc+0x93/0xb0 [ 75.484784][ T5325] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 75.488082][ T5325] krealloc_noprof+0x124/0x340 [ 75.490498][ T5325] __bch2_trans_kmalloc+0x26c/0xc80 [ 75.492807][ T5325] bch2_str_hash_repair_key+0x2a65/0x3fa0 [ 75.495254][ T5325] __bch2_str_hash_check_key+0xa65/0xd40 [ 75.497669][ T5325] bch2_check_xattrs+0x933/0xcc0 [ 75.500165][ T5325] __bch2_run_recovery_passes+0x392/0x1010 [ 75.503203][ T5325] bch2_run_recovery_passes+0x184/0x210 [ 75.505826][ T5325] bch2_fs_recovery+0x25fd/0x3950 [ 75.508038][ T5325] bch2_fs_start+0xa99/0xd90 [ 75.510167][ T5325] bch2_fs_get_tree+0xb02/0x14f0 [ 75.512480][ T5325] vfs_get_tree+0x8f/0x2b0 [ 75.514661][ T5325] do_new_mount+0x24a/0xa40 [ 75.516822][ T5325] __se_sys_mount+0x317/0x410 [ 75.519011][ T5325] do_syscall_64+0xfa/0x3b0 [ 75.521079][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.523792][ T5325] [ 75.524938][ T5325] Freed by task 5325: [ 75.526854][ T5325] kasan_save_track+0x3e/0x80 [ 75.529139][ T5325] kasan_save_free_info+0x46/0x50 [ 75.531555][ T5325] __kasan_slab_free+0x62/0x70 [ 75.533623][ T5325] kfree+0x18e/0x440 [ 75.535333][ T5325] krealloc_noprof+0x1cd/0x340 [ 75.537521][ T5325] __bch2_trans_kmalloc+0x26c/0xc80 [ 75.540324][ T5325] bch2_str_hash_repair_key+0x2fde/0x3fa0 [ 75.543177][ T5325] __bch2_str_hash_check_key+0xa65/0xd40 [ 75.545596][ T5325] bch2_check_xattrs+0x933/0xcc0 [ 75.547792][ T5325] __bch2_run_recovery_passes+0x392/0x1010 [ 75.550285][ T5325] bch2_run_recovery_passes+0x184/0x210 [ 75.553162][ T5325] bch2_fs_recovery+0x25fd/0x3950 [ 75.555554][ T5325] bch2_fs_start+0xa99/0xd90 [ 75.557552][ T5325] bch2_fs_get_tree+0xb02/0x14f0 [ 75.559736][ T5325] vfs_get_tree+0x8f/0x2b0 [ 75.561717][ T5325] do_new_mount+0x24a/0xa40 [ 75.564069][ T5325] __se_sys_mount+0x317/0x410 [ 75.566615][ T5325] do_syscall_64+0xfa/0x3b0 [ 75.568921][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.571538][ T5325] [ 75.572605][ T5325] The buggy address belongs to the object at ffff8880557b7300 [ 75.572605][ T5325] which belongs to the cache kmalloc-128 of size 128 [ 75.578556][ T5325] The buggy address is located 40 bytes inside of [ 75.578556][ T5325] freed 128-byte region [ffff8880557b7300, ffff8880557b7380) [ 75.584394][ T5325] [ 75.585490][ T5325] The buggy address belongs to the physical page: [ 75.588330][ T5325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x557b7 [ 75.592092][ T5325] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 75.595233][ T5325] page_type: f5(slab) [ 75.596979][ T5325] raw: 04fff00000000000 ffff88801a441a00 dead000000000122 0000000000000000 [ 75.601103][ T5325] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 75.604735][ T5325] page dumped because: kasan: bad access detected [ 75.607433][ T5325] page_owner tracks the page as allocated [ 75.610033][ T5325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5325, tgid 5324 (syz.0.0), ts 75236064025, free_ts 0 [ 75.618329][ T5325] post_alloc_hook+0x240/0x2a0 [ 75.620587][ T5325] get_page_from_freelist+0x21e4/0x22c0 [ 75.622993][ T5325] __alloc_frozen_pages_noprof+0x181/0x370 [ 75.625949][ T5325] alloc_pages_mpol+0x232/0x4a0 [ 75.628700][ T5325] allocate_slab+0x8a/0x3b0 [ 75.630838][ T5325] ___slab_alloc+0xbfc/0x1480 [ 75.632889][ T5325] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 75.635784][ T5325] krealloc_noprof+0x124/0x340 [ 75.637998][ T5325] bch2_printbuf_make_room+0x1f5/0x360 [ 75.640704][ T5325] bch2_prt_printf+0x282/0x740 [ 75.643396][ T5325] bch2_bpos_to_text+0x25b/0x3d0 [ 75.645868][ T5325] bch2_btree_path_to_text_short+0x1be/0xde0 [ 75.648505][ T5325] __bch2_trans_paths_to_text+0xe5/0x190 [ 75.650968][ T5325] bch2_trans_update_max_paths+0x14e/0x340 [ 75.653455][ T5325] btree_path_alloc+0x89a/0xa70 [ 75.655733][ T5325] __bch2_btree_path_make_mut+0x1cc/0x520 [ 75.658576][ T5325] page_owner free stack trace missing [ 75.660961][ T5325] [ 75.662091][ T5325] Memory state around the buggy address: [ 75.664477][ T5325] ffff8880557b7200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.668510][ T5325] ffff8880557b7280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.672801][ T5325] >ffff8880557b7300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.676347][ T5325] ^ [ 75.678672][ T5325] ffff8880557b7380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.682440][ T5325] ffff8880557b7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.687101][ T5325] ================================================================== [ 75.701723][ T5325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.704796][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 75.709950][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.715128][ T5325] Call Trace: [ 75.716539][ T5325] [ 75.717815][ T5325] dump_stack_lvl+0x99/0x250 [ 75.719848][ T5325] ? __asan_memcpy+0x40/0x70 [ 75.722031][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.724759][ T5325] ? __pfx__printk+0x10/0x10 [ 75.727084][ T5325] panic+0x2db/0x790 [ 75.728890][ T5325] ? __pfx_panic+0x10/0x10 [ 75.730903][ T5325] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 75.733912][ T5325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.737157][ T5325] ? print_memory_metadata+0x314/0x400 [ 75.739649][ T5325] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.741991][ T5325] check_panic_on_warn+0x89/0xb0 [ 75.744075][ T5325] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.746566][ T5325] end_report+0x78/0x160 [ 75.748528][ T5325] kasan_report+0x129/0x150 [ 75.750657][ T5325] ? bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.753350][ T5325] bch2_str_hash_repair_key+0x2d42/0x3fa0 [ 75.755825][ T5325] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 75.758217][ T5325] ? bch2_str_hash_repair_key+0x573/0x3fa0 [ 75.761157][ T5325] ? __pfx_xattr_cmp_bkey+0x10/0x10 [ 75.763650][ T5325] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 75.766134][ T5325] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 75.768930][ T5325] ? kasan_quarantine_put+0xdd/0x220 [ 75.771490][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.774103][ T5325] ? bch2_printbuf_exit+0x6f/0xb0 [ 75.776413][ T5325] ? kfree+0x18e/0x440 [ 75.778185][ T5325] ? bch2_printbuf_exit+0x6f/0xb0 [ 75.780433][ T5325] ? __bch2_fsck_err+0xd1c/0xfb0 [ 75.782706][ T5325] ? bch2_str_hash_repair_key+0xdb9/0x3fa0 [ 75.785676][ T5325] __bch2_str_hash_check_key+0xa65/0xd40 [ 75.788597][ T5325] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 75.791254][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.793434][ T5325] ? bch2_str_hash_repair_key+0xfdd/0x3fa0 [ 75.795987][ T5325] ? __pfx_xattr_hash_bkey+0x10/0x10 [ 75.798569][ T5325] ? bch2_check_key_has_snapshot+0x73/0x370 [ 75.801928][ T5325] ? bch2_check_key_has_snapshot+0x2af/0x370 [ 75.806231][ T5325] bch2_check_xattrs+0x933/0xcc0 [ 75.808801][ T5325] ? __pfx_bch2_check_xattrs+0x10/0x10 [ 75.811264][ T5325] ? vprintk_emit+0x63e/0x7a0 [ 75.813577][ T5325] ? __pfx_vprintk_emit+0x10/0x10 [ 75.816457][ T5325] ? bch2_check_xattrs+0x1f2/0xcc0 [ 75.819518][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.822030][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.824343][ T5325] __bch2_run_recovery_passes+0x392/0x1010 [ 75.826913][ T5325] bch2_run_recovery_passes+0x184/0x210 [ 75.829325][ T5325] bch2_fs_recovery+0x25fd/0x3950 [ 75.831552][ T5325] ? check_noncircular+0xe0/0x160 [ 75.833762][ T5325] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.836538][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.839258][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.841753][ T5325] ? __lock_acquire+0xab9/0xd20 [ 75.843752][ T5325] ? bch2_fs_start+0x9fe/0xd90 [ 75.845631][ T5325] ? up_write+0x1c4/0x420 [ 75.847452][ T5325] ? bch2_fs_start+0x5c4/0xd90 [ 75.849587][ T5325] bch2_fs_start+0xa99/0xd90 [ 75.851633][ T5325] ? bch2_fs_start+0x5c4/0xd90 [ 75.853627][ T5325] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.855563][ T5325] ? sget+0x267/0x620 [ 75.857694][ T5325] bch2_fs_get_tree+0xb02/0x14f0 [ 75.860578][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.863716][ T5325] ? aa_get_newest_label+0xf7/0x5d0 [ 75.866108][ T5325] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.868723][ T5325] ? apparmor_capable+0x137/0x1b0 [ 75.870949][ T5325] vfs_get_tree+0x8f/0x2b0 [ 75.873064][ T5325] do_new_mount+0x24a/0xa40 [ 75.875194][ T5325] __se_sys_mount+0x317/0x410 [ 75.877525][ T5325] ? __pfx___se_sys_mount+0x10/0x10 [ 75.880518][ T5325] ? do_syscall_64+0xbe/0x3b0 [ 75.882688][ T5325] ? __x64_sys_mount+0x20/0xc0 [ 75.884845][ T5325] do_syscall_64+0xfa/0x3b0 [ 75.887339][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.890191][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.893623][ T5325] ? clear_bhb_loop+0x60/0xb0 [ 75.895975][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.898735][ T5325] RIP: 0033:0x7f222d1900ca [ 75.900847][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.910269][ T5325] RSP: 002b:00007f22295f4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.913916][ T5325] RAX: ffffffffffffffda RBX: 00007f22295f4ef0 RCX: 00007f222d1900ca [ 75.917442][ T5325] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007f22295f4eb0 [ 75.921478][ T5325] RBP: 0000200000000140 R08: 00007f22295f4ef0 R09: 0000000000810000 [ 75.925325][ T5325] R10: 0000000000810000 R11: 0000000000000246 R12: 0000200000000000 [ 75.928911][ T5325] R13: 00007f22295f4eb0 R14: 0000000000005986 R15: 0000200000000100 [ 75.932461][ T5325] [ 75.934363][ T5325] Kernel Offset: disabled [ 75.936665][ T5325] Rebooting in 86400 seconds..