program: syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x59f4, &(0x7f0000005c00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r1, 0x8926, 0x20001114) ioctl$KDMKTONE(r1, 0x4b30, 0x5) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2354858a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26785e53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x4}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34755557}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d7cf728}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d65713c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x504c2a00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48f5a52b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23f4822}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6195a401}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e61b0ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64331551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9966}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x936d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b14f0d5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63e7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1192fc7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfaff}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ffe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72f6053f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a453f3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475da646}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x480c0) [ 74.573932][ T5335] Bluetooth: hci0: command tx timeout [ 75.334802][ T5356] loop0: detected capacity change from 0 to 32768 [ 75.829309][ T5356] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 75.829332][ T5356] allowing incompatible features above 0.0: (unknown version) [ 75.829340][ T5356] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.855841][ T5356] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.863895][ T5356] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.901536][ T5356] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 75.901536][ T5356] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 75.901536][ T5356] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 76.084767][ T5356] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 10 type deleted 0:10:0 len 0 ver 65024: [ 76.084802][ T5356] snapshot == 0, deleting [ 76.108263][ T5356] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 8 type inode_v3 0:536870912:U32_MAX len 0 ver 65024: (unpack error) [ 76.108282][ T5356] bad val size (24 < 48), deleting [ 76.148208][ T5356] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 76.148244][ T5356] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 76.148254][ T5356] loop0 node offset 0/24: bad magic: want 59513f585d347cd2, got 59513f0000000000 [ 76.148261][ T5356] loop0 btree validate error [ 76.148266][ T5356] flagging btree alloc lost data [ 76.148272][ T5356] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.148279][ T5356] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 76.148287][ T5356] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 76.148296][ T5356] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 76.148303][ T5356] ret btree_node_read_err_bad_node [ 76.257132][ T5356] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 76.288478][ T5356] bcachefs (loop0): check_topology... done [ 76.305356][ T5356] bcachefs (loop0): accounting_read... done [ 76.329105][ T5356] bcachefs (loop0): alloc_read... done [ 76.333249][ T5356] bcachefs (loop0): snapshots_read... done [ 76.337464][ T5356] bcachefs (loop0): check_allocations... [ 76.340134][ T5356] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 76.340162][ T5356] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 76.394964][ T5356] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 76.394979][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 76.436098][ T5356] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 76.436124][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.504564][ T5356] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 76.504580][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.549697][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.549764][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.585799][ T5356] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 76.585816][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 76.597719][ T5335] Bluetooth: hci0: command tx timeout [ 76.623640][ T5356] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 76.623657][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.659451][ T5356] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 76.659468][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 76.703114][ T5356] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 76.703130][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 76.728600][ T5356] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 76.728616][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 76.787811][ T5356] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 76.787831][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 76.812148][ T5356] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 76.812164][ T5356] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 76.812176][ T5356] Ratelimiting new instances of previous error [ 76.884633][ T5356] done [ 76.887442][ T5356] bcachefs (loop0): going read-write [ 76.968194][ T5356] bcachefs (loop0): journal_replay... done [ 77.500283][ T5356] bcachefs (loop0): check_alloc_info... [ 77.517717][ T5356] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 77.517747][ T5356] device 0 buckets 26-27, fixing [ 77.530381][ T5356] done [ 77.550971][ T5356] bcachefs (loop0): check_lrus... done [ 77.554027][ T5356] bcachefs (loop0): check_backpointers_to_extents... done [ 77.566998][ T5356] bcachefs (loop0): check_extents_to_backpointers... [ 77.567984][ T5356] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets [ 77.606917][ T5356] done [ 77.609635][ T5356] bcachefs (loop0): check_subvols... done [ 77.670046][ T5356] bcachefs (loop0): check_inodes... done [ 77.677334][ T5356] bcachefs (loop0): check_dirents... [ 77.679337][ T5356] bcachefs (loop0): dirent points to missing inode: [ 77.679352][ T5356] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 77.780386][ T5356] bcachefs (loop0): dirent points to missing inode: [ 77.780401][ T5356] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 77.834365][ T5356] bcachefs (loop0): dirent points to missing inode: [ 77.834440][ T5356] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 77.875345][ T5356] bcachefs (loop0): hash table key at wrong offset: should be at 5178636093158006573 [ 77.875360][ T5356] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+foun -> 4097 type dir, fixing [ 77.928916][ T5356] bcachefs (loop0): dirent points to missing inode: [ 77.928931][ T5356] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 172335562754 type reg, fixing [ 77.944177][ T5356] ================================================================== [ 77.959272][ T5356] BUG: KASAN: use-after-free in bch2_check_dirents+0x1fac/0x33f0 [ 77.965724][ T5356] Read of size 1 at addr ffff888055e20190 by task syz.0.0/5356 [ 77.970561][ T5356] [ 77.978201][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 77.978220][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.978228][ T5356] Call Trace: [ 77.978235][ T5356] [ 77.978242][ T5356] dump_stack_lvl+0x189/0x250 [ 77.978260][ T5356] ? __kasan_check_byte+0x12/0x40 [ 77.978276][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.978289][ T5356] ? lock_release+0x4b/0x3e0 [ 77.978306][ T5356] ? __virt_addr_valid+0x4a5/0x5c0 [ 77.978322][ T5356] print_report+0xca/0x240 [ 77.978333][ T5356] ? bch2_check_dirents+0x1fac/0x33f0 [ 77.978349][ T5356] kasan_report+0x118/0x150 [ 77.978361][ T5356] ? bch2_check_dirents+0x1fac/0x33f0 [ 77.978379][ T5356] bch2_check_dirents+0x1fac/0x33f0 [ 77.978398][ T5356] ? bch2_check_dirents+0x2f1/0x33f0 [ 77.978416][ T5356] ? desc_read+0x1b8/0x3f0 [ 77.978428][ T5356] ? prb_first_seq+0xfd/0x1a0 [ 77.978438][ T5356] ? __pfx_bch2_check_dirents+0x10/0x10 [ 77.978454][ T5356] ? __pfx_prb_first_seq+0x10/0x10 [ 77.978465][ T5356] ? desc_read+0x1b8/0x3f0 [ 77.978476][ T5356] ? this_cpu_in_panic+0x4f/0x80 [ 77.978496][ T5356] ? _prb_read_valid+0xa07/0xa90 [ 77.978506][ T5356] ? console_flush_all+0x13a/0xc40 [ 77.978519][ T5356] ? up+0xde/0x150 [ 77.978583][ T5356] ? __console_unlock+0x14c/0x1a0 [ 77.978595][ T5356] ? __pfx___console_unlock+0x10/0x10 [ 77.978608][ T5356] ? prb_read_valid+0x3c/0x60 [ 77.978619][ T5356] ? console_unlock+0x21b/0x270 [ 77.978633][ T5356] ? __pfx_console_unlock+0x10/0x10 [ 77.978648][ T5356] ? vprintk_emit+0x63e/0x7a0 [ 77.978666][ T5356] ? __bch2_print+0x176/0x220 [ 77.978678][ T5356] ? bch2_check_dirents+0x2f1/0x33f0 [ 77.978697][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.978712][ T5356] __bch2_run_recovery_passes+0x3ba/0x1060 [ 77.978730][ T5356] bch2_run_recovery_passes+0x184/0x210 [ 77.978742][ T5356] bch2_fs_recovery+0x2690/0x3a50 [ 77.978764][ T5356] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 77.978784][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.978801][ T5356] ? __mutex_trylock_common+0x153/0x260 [ 77.978814][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.978832][ T5356] ? __lock_acquire+0xab9/0xd20 [ 77.978851][ T5356] ? bch2_fs_start+0xa0f/0xda0 [ 77.978864][ T5356] ? up_write+0x1c4/0x420 [ 77.978876][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 77.978888][ T5356] bch2_fs_start+0xaaf/0xda0 [ 77.978900][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 77.978912][ T5356] ? __pfx_bch2_fs_start+0x10/0x10 [ 77.978928][ T5356] ? sget+0x267/0x620 [ 77.978940][ T5356] bch2_fs_get_tree+0xb39/0x1520 [ 77.978958][ T5356] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 77.978981][ T5356] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 77.979000][ T5356] vfs_get_tree+0x8f/0x2b0 [ 77.979014][ T5356] do_new_mount+0x2a2/0x9e0 [ 77.979029][ T5356] ? ns_capable+0x8a/0xf0 [ 77.979040][ T5356] ? __pfx_do_new_mount+0x10/0x10 [ 77.979053][ T5356] ? path_mount+0x61c/0xfe0 [ 77.979065][ T5356] ? user_path_at+0x44/0x60 [ 77.979076][ T5356] __se_sys_mount+0x317/0x410 [ 77.979111][ T5356] ? __pfx___se_sys_mount+0x10/0x10 [ 77.979126][ T5356] ? do_syscall_64+0xbe/0x3b0 [ 77.979139][ T5356] ? __x64_sys_mount+0x20/0xc0 [ 77.979153][ T5356] do_syscall_64+0xfa/0x3b0 [ 77.979166][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.979180][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.979192][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 77.979205][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.979217][ T5356] RIP: 0033:0x7f5c93f9038a [ 77.979230][ T5356] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.979240][ T5356] RSP: 002b:00007f5c94d99e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.979253][ T5356] RAX: ffffffffffffffda RBX: 00007f5c94d99ef0 RCX: 00007f5c93f9038a [ 77.979261][ T5356] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 00007f5c94d99eb0 [ 77.979268][ T5356] RBP: 0000200000000080 R08: 00007f5c94d99ef0 R09: 0000000000000000 [ 77.979285][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 77.979293][ T5356] R13: 00007f5c94d99eb0 R14: 00000000000059f4 R15: 00002000000001c0 [ 77.979303][ T5356] [ 77.979308][ T5356] [ 78.363725][ T5356] The buggy address belongs to the physical page: [ 78.366990][ T5356] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55e20 [ 78.381187][ T5356] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 78.391854][ T5356] page_type: f0(buddy) [ 78.393672][ T5356] raw: 04fff00000000000 ffffea000157e808 ffff88805ffd6f08 0000000000000000 [ 78.397134][ T5356] raw: 0000000000000000 0000000000000005 00000000f0000000 0000000000000000 [ 78.400515][ T5356] page dumped because: kasan: bad access detected [ 78.416685][ T5356] page_owner tracks the page as freed [ 78.419928][ T5356] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x42800(GFP_NOWAIT|__GFP_COMP), pid 5356, tgid 5355 (syz.0.0), ts 76144408096, free_ts 77943924873 [ 78.439917][ T5356] post_alloc_hook+0x240/0x2a0 [ 78.444022][ T5356] get_page_from_freelist+0x21e4/0x22c0 [ 78.448067][ T5356] __alloc_frozen_pages_noprof+0x181/0x370 [ 78.455094][ T5356] alloc_pages_mpol+0x232/0x4a0 [ 78.459261][ T5356] ___kmalloc_large_node+0x5f/0x1b0 [ 78.464351][ T5356] __kmalloc_large_node_noprof+0x18/0x90 [ 78.469520][ T5356] __kvmalloc_node_noprof+0x6d/0x5f0 [ 78.474659][ T5356] bch2_btree_node_read_done+0x32f6/0x5550 [ 78.478822][ T5356] btree_node_read_work+0x40e/0xe60 [ 78.482402][ T5356] bch2_btree_node_read+0x887/0x2a00 [ 78.486575][ T5356] bch2_btree_root_read+0x5f0/0x760 [ 78.491337][ T5356] read_btree_roots+0x2c6/0x840 [ 78.495185][ T5356] bch2_fs_recovery+0x261f/0x3a50 [ 78.498119][ T5356] bch2_fs_start+0xaaf/0xda0 [ 78.500309][ T5356] bch2_fs_get_tree+0xb39/0x1520 [ 78.502565][ T5356] vfs_get_tree+0x8f/0x2b0 [ 78.504710][ T5356] page last free pid 5356 tgid 5355 stack trace: [ 78.507257][ T5356] __free_pages_ok+0xa83/0xbe0 [ 78.509268][ T5356] free_large_kmalloc+0x13a/0x1f0 [ 78.515180][ T5356] btree_node_sort+0x117f/0x1760 [ 78.518607][ T5356] bch2_btree_post_write_cleanup+0x11f/0xad0 [ 78.522873][ T5356] bch2_btree_node_prep_for_write+0x337/0x650 [ 78.530557][ T5356] bch2_trans_lock_write+0x669/0xba0 [ 78.535492][ T5356] __bch2_trans_commit+0x2773/0x8870 [ 78.539416][ T5356] bch2_check_dirents+0x1c5c/0x33f0 [ 78.546335][ T5356] __bch2_run_recovery_passes+0x3ba/0x1060 [ 78.550218][ T5356] bch2_run_recovery_passes+0x184/0x210 [ 78.554801][ T5356] bch2_fs_recovery+0x2690/0x3a50 [ 78.556904][ T5356] bch2_fs_start+0xaaf/0xda0 [ 78.558854][ T5356] bch2_fs_get_tree+0xb39/0x1520 [ 78.561113][ T5356] vfs_get_tree+0x8f/0x2b0 [ 78.563185][ T5356] do_new_mount+0x2a2/0x9e0 [ 78.566838][ T5356] __se_sys_mount+0x317/0x410 [ 78.570483][ T5356] [ 78.571901][ T5356] Memory state around the buggy address: [ 78.590755][ T5356] ffff888055e20080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.601449][ T5356] ffff888055e20100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.608140][ T5356] >ffff888055e20180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.617754][ T5356] ^ [ 78.630589][ T5356] ffff888055e20200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.635195][ T5356] ffff888055e20280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.641713][ T5356] ================================================================== [ 78.662918][ T5356] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.667740][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 78.674594][ T5356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.681945][ T5356] Call Trace: [ 78.683805][ T5356] [ 78.685569][ T5356] dump_stack_lvl+0x99/0x250 [ 78.690171][ T5356] ? __asan_memcpy+0x40/0x70 [ 78.694831][ T5356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.699369][ T5356] ? __pfx__printk+0x10/0x10 [ 78.706046][ T5356] vpanic+0x281/0x750 [ 78.709511][ T5356] ? preempt_schedule+0xae/0xc0 [ 78.713350][ T5356] ? __pfx_vpanic+0x10/0x10 [ 78.716342][ T5356] ? preempt_schedule_common+0x83/0xd0 [ 78.718725][ T5356] ? preempt_schedule+0xae/0xc0 [ 78.720916][ T5356] ? __pfx_preempt_schedule+0x10/0x10 [ 78.723283][ T5356] panic+0xb9/0xc0 [ 78.724978][ T5356] ? __pfx_panic+0x10/0x10 [ 78.726826][ T5356] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 78.729525][ T5356] ? bch2_check_dirents+0x1fac/0x33f0 [ 78.732820][ T5356] check_panic_on_warn+0x89/0xb0 [ 78.736540][ T5356] ? bch2_check_dirents+0x1fac/0x33f0 [ 78.742019][ T5356] end_report+0x78/0x160 [ 78.746636][ T5356] kasan_report+0x129/0x150 [ 78.750158][ T5356] ? bch2_check_dirents+0x1fac/0x33f0 [ 78.755276][ T5356] bch2_check_dirents+0x1fac/0x33f0 [ 78.760076][ T5356] ? bch2_check_dirents+0x2f1/0x33f0 [ 78.763822][ T5356] ? desc_read+0x1b8/0x3f0 [ 78.766968][ T5356] ? prb_first_seq+0xfd/0x1a0 [ 78.770074][ T5356] ? __pfx_bch2_check_dirents+0x10/0x10 [ 78.773939][ T5356] ? __pfx_prb_first_seq+0x10/0x10 [ 78.778806][ T5356] ? desc_read+0x1b8/0x3f0 [ 78.782609][ T5356] ? this_cpu_in_panic+0x4f/0x80 [ 78.784721][ T5356] ? _prb_read_valid+0xa07/0xa90 [ 78.786809][ T5356] ? console_flush_all+0x13a/0xc40 [ 78.790365][ T5356] ? up+0xde/0x150 [ 78.793253][ T5356] ? __console_unlock+0x14c/0x1a0 [ 78.796829][ T5356] ? __pfx___console_unlock+0x10/0x10 [ 78.801451][ T5356] ? prb_read_valid+0x3c/0x60 [ 78.808404][ T5356] ? console_unlock+0x21b/0x270 [ 78.814410][ T5356] ? __pfx_console_unlock+0x10/0x10 [ 78.820379][ T5356] ? vprintk_emit+0x63e/0x7a0 [ 78.823722][ T5356] ? __bch2_print+0x176/0x220 [ 78.825999][ T5356] ? bch2_check_dirents+0x2f1/0x33f0 [ 78.828720][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.832640][ T5356] __bch2_run_recovery_passes+0x3ba/0x1060 [ 78.836558][ T5356] bch2_run_recovery_passes+0x184/0x210 [ 78.840293][ T5356] bch2_fs_recovery+0x2690/0x3a50 [ 78.843771][ T5356] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 78.850208][ T5356] ? __lock_acquire+0xab9/0xd20 [ 78.854261][ T5356] ? __mutex_trylock_common+0x153/0x260 [ 78.860155][ T5356] ? __lock_acquire+0xab9/0xd20 [ 78.862926][ T5356] ? __lock_acquire+0xab9/0xd20 [ 78.866243][ T5356] ? bch2_fs_start+0xa0f/0xda0 [ 78.869317][ T5356] ? up_write+0x1c4/0x420 [ 78.871433][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 78.874230][ T5356] bch2_fs_start+0xaaf/0xda0 [ 78.876912][ T5356] ? bch2_fs_start+0x5e7/0xda0 [ 78.879737][ T5356] ? __pfx_bch2_fs_start+0x10/0x10 [ 78.883105][ T5356] ? sget+0x267/0x620 [ 78.884792][ T5356] bch2_fs_get_tree+0xb39/0x1520 [ 78.887327][ T5356] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 78.889817][ T5356] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 78.892186][ T5356] vfs_get_tree+0x8f/0x2b0 [ 78.894206][ T5356] do_new_mount+0x2a2/0x9e0 [ 78.896058][ T5356] ? ns_capable+0x8a/0xf0 [ 78.897853][ T5356] ? __pfx_do_new_mount+0x10/0x10 [ 78.902295][ T5356] ? path_mount+0x61c/0xfe0 [ 78.906279][ T5356] ? user_path_at+0x44/0x60 [ 78.908977][ T5356] __se_sys_mount+0x317/0x410 [ 78.912277][ T5356] ? __pfx___se_sys_mount+0x10/0x10 [ 78.914974][ T5356] ? do_syscall_64+0xbe/0x3b0 [ 78.918026][ T5356] ? __x64_sys_mount+0x20/0xc0 [ 78.921440][ T5356] do_syscall_64+0xfa/0x3b0 [ 78.925184][ T5356] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.929356][ T5356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.934311][ T5356] ? clear_bhb_loop+0x60/0xb0 [ 78.938422][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.944021][ T5356] RIP: 0033:0x7f5c93f9038a [ 78.946516][ T5356] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.967976][ T5356] RSP: 002b:00007f5c94d99e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.973875][ T5356] RAX: ffffffffffffffda RBX: 00007f5c94d99ef0 RCX: 00007f5c93f9038a [ 78.977799][ T5356] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 00007f5c94d99eb0 [ 78.985388][ T5356] RBP: 0000200000000080 R08: 00007f5c94d99ef0 R09: 0000000000000000 [ 78.993267][ T5356] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 79.000532][ T5356] R13: 00007f5c94d99eb0 R14: 00000000000059f4 R15: 00002000000001c0 [ 79.005731][ T5356] [ 79.008717][ T5356] Kernel Offset: disabled [ 79.011352][ T5356] Rebooting in 86400 seconds..