program: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/13) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000005d00)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES16=r4], 0x1, 0x5922, &(0x7f00000003c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x100}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r7, 0xffffffffbffffc01, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x200000, 0x0, 0x8}, 0x18) [ 68.316390][ T4668] Bluetooth: hci0: command tx timeout [ 68.937931][ T5323] loop0: detected capacity change from 0 to 32768 [ 69.584807][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 69.591509][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.596204][ T5323] bcachefs (loop0): Version upgrade required: [ 69.596204][ T5323] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 69.596204][ T5323] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 69.596204][ T5323] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 69.784113][ T5323] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 69.784140][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 69.784149][ T5323] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 69.800837][ T5323] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 69.800837][ T5323] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 69.880236][ T5323] bcachefs (loop0): accounting_read... done [ 69.883895][ T5323] bcachefs (loop0): alloc_read... done [ 69.886354][ T5323] bcachefs (loop0): stripes_read... done [ 69.888593][ T5323] bcachefs (loop0): snapshots_read... done [ 69.891102][ T5323] bcachefs (loop0): check_allocations... [ 69.897544][ T5323] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 69.897572][ T5323] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.913609][ T5323] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 69.913626][ T5323] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.926903][ T5323] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 69.926919][ T5323] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 69.936328][ T5323] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 69.936344][ T5323] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 69.949456][ T5323] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 69.949474][ T5323] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 69.958773][ T5323] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.961695][ T5323] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.966276][ T5323] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.969448][ T5323] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.976843][ T5323] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.980666][ T5323] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.984308][ T5323] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.987756][ T5323] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.991370][ T5323] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 69.994370][ T5323] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 69.999270][ T5323] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.003624][ T5323] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.007940][ T5323] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.010863][ T5323] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.015456][ T5323] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.018544][ T5323] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 70.022041][ T5323] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.025172][ T5323] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.028843][ T5323] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.032836][ T5323] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.037551][ T5323] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.040796][ T5323] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.044494][ T5323] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.047827][ T5323] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.051746][ T5323] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.055521][ T5323] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.060069][ T5323] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.063235][ T5323] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.067323][ T5323] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.071229][ T5323] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.076271][ T5323] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.079306][ T5323] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.083053][ T5323] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.087287][ T5323] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.092095][ T5323] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.096020][ T5323] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.101082][ T5323] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.104530][ T5323] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.109013][ T5323] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.112536][ T5323] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.116874][ T5323] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.119967][ T5323] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.123413][ T5323] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.126489][ T5323] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.130811][ T5323] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.134681][ T5323] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.138695][ T5323] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 70.142016][ T5323] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 70.145728][ T5323] bucket 0:26 gen 0 has wrong data_type: got free, should be btree, fixing [ 70.148868][ T5323] bucket 0:26 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 70.153025][ T5323] bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing [ 70.157384][ T5323] bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 70.161586][ T5323] bucket 0:32 gen 0 has wrong data_type: got sb, should be btree, fixing [ 70.165410][ T5323] bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing [ 70.169312][ T5323] bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 70.173752][ T5323] bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 70.179314][ T5323] bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 70.184069][ T5323] bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing [ 70.187380][ T5323] bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 70.192257][ T5323] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.195979][ T5323] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.199829][ T5323] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.203336][ T5323] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.207817][ T5323] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.211642][ T5323] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.215250][ T5323] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.218203][ T5323] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.222860][ T5323] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.226745][ T5323] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.230649][ T5323] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.233917][ T5323] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.238043][ T5323] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.241681][ T5323] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.245560][ T5323] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 70.248587][ T5323] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 70.254123][ T5323] done [ 70.261840][ T5323] bcachefs (loop0): going read-write [ 70.265111][ T5323] bcachefs (loop0): journal_replay... done [ 70.341797][ T4668] Bluetooth: hci0: command tx timeout [ 70.344926][ T5323] bcachefs (loop0): check_alloc_info... done [ 70.352515][ T5323] bcachefs (loop0): check_lrus... done [ 70.356660][ T5323] bcachefs (loop0): check_btree_backpointers... done [ 70.360869][ T5323] bcachefs (loop0): check_backpointers_to_extents... done [ 70.368308][ T5323] bcachefs (loop0): check_extents_to_backpointers... [ 70.369368][ T5323] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 70.376350][ T5323] done [ 70.379635][ T5323] bcachefs (loop0): check_alloc_to_lru_refs... done [ 70.383798][ T5323] bcachefs (loop0): bucket_gens_init... done [ 70.393207][ T5323] bcachefs (loop0): check_snapshot_trees... done [ 70.397486][ T5323] bcachefs (loop0): check_snapshots... [ 70.398260][ T5323] snapshot points to missing/incorrect tree: [ 70.398276][ T5323] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 70.409069][ T5323] snapshot points to missing/incorrect tree: [ 70.409080][ T5323] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 70.421453][ T5323] done [ 70.436006][ T5323] bcachefs (loop0): check_subvols... done [ 70.439956][ T5323] bcachefs (loop0): check_subvol_children... done [ 70.443106][ T5323] bcachefs (loop0): delete_dead_snapshots... done [ 70.446880][ T5323] bcachefs (loop0): check_inodes... done [ 70.450651][ T5323] bcachefs (loop0): check_extents... done [ 70.454351][ T5323] bcachefs (loop0): check_indirect_extents... done [ 70.461790][ T5323] bcachefs (loop0): check_dirents... [ 70.463057][ T5323] directory 4096:4294967295 with wrong i_size: got 0, should be 352, fixing [ 70.468799][ T5323] done [ 70.476803][ T5323] bcachefs (loop0): check_xattrs... done [ 70.480446][ T5323] bcachefs (loop0): check_root... done [ 70.483503][ T5323] bcachefs (loop0): check_unreachable_inodes... done [ 70.486959][ T5323] bcachefs (loop0): check_subvolume_structure... done [ 70.490048][ T5323] bcachefs (loop0): check_directory_structure... done [ 70.494091][ T5323] bcachefs (loop0): check_nlinks... [ 70.494850][ T5323] inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing [ 70.501339][ T5323] done [ 70.507782][ T5323] bcachefs (loop0): resume_logged_ops... done [ 70.510578][ T5323] bcachefs (loop0): delete_dead_inodes... done [ 70.513489][ T5323] bcachefs (loop0): set_fs_needs_rebalance... done [ 70.543034][ T5323] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 70.546760][ T5323] bcachefs (loop0): check_alloc_info... done [ 70.553248][ T5323] bcachefs (loop0): check_lrus... done [ 70.555794][ T5323] bcachefs (loop0): check_btree_backpointers... done [ 70.558920][ T5323] bcachefs (loop0): check_backpointers_to_extents... done [ 70.562405][ T5323] bcachefs (loop0): check_extents_to_backpointers... [ 70.563215][ T5323] bcachefs (loop0): scanning for missing backpointers in 1/128 buckets [ 70.570297][ T5323] done [ 70.573743][ T5323] bcachefs (loop0): check_alloc_to_lru_refs... done [ 70.577196][ T5323] bcachefs (loop0): bucket_gens_init... done [ 70.582271][ T5323] bcachefs (loop0): check_snapshot_trees... done [ 70.586192][ T5323] bcachefs (loop0): check_snapshots... done [ 70.588608][ T5323] bcachefs (loop0): check_subvols... done [ 70.590881][ T5323] bcachefs (loop0): check_subvol_children... done [ 70.593384][ T5323] bcachefs (loop0): delete_dead_snapshots... done [ 70.596537][ T5323] bcachefs (loop0): check_inodes... done [ 70.599558][ T5323] bcachefs (loop0): check_extents... done [ 70.603465][ T5323] bcachefs (loop0): check_indirect_extents... done [ 70.607226][ T5323] bcachefs (loop0): check_dirents... done [ 70.610502][ T5323] bcachefs (loop0): check_xattrs... done [ 70.613303][ T5323] bcachefs (loop0): check_root... done [ 70.616226][ T5323] bcachefs (loop0): check_unreachable_inodes... done [ 70.619794][ T5323] bcachefs (loop0): check_subvolume_structure... done [ 70.623482][ T5323] bcachefs (loop0): check_directory_structure... done [ 70.626715][ T5323] bcachefs (loop0): check_nlinks... done [ 70.629139][ T5323] bcachefs (loop0): resume_logged_ops... done [ 70.631740][ T5323] bcachefs (loop0): delete_dead_inodes... done [ 70.635660][ T5323] bcachefs (loop0): set_fs_needs_rebalance... done [ 70.647339][ T5323] bcachefs (loop0): done starting filesystem [ 70.708061][ T5323] [ 70.709201][ T5323] ====================================================== [ 70.712576][ T5323] WARNING: possible circular locking dependency detected [ 70.715595][ T5323] 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 Not tainted [ 70.718506][ T5323] ------------------------------------------------------ [ 70.721122][ T5323] syz.0.0/5323 is trying to acquire lock: [ 70.723415][ T5323] ffff888053401c68 (&bc->lock){+.+.}-{4:4}, at: bch2_btree_cache_scan+0x184/0xec0 [ 70.727707][ T5323] [ 70.727707][ T5323] but task is already holding lock: [ 70.731001][ T5323] ffffffff8ec3a200 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xd4/0x3c0 [ 70.734678][ T5323] [ 70.734678][ T5323] which lock already depends on the new lock. [ 70.734678][ T5323] [ 70.738426][ T5323] [ 70.738426][ T5323] the existing dependency chain (in reverse order) is: [ 70.741706][ T5323] [ 70.741706][ T5323] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 70.744490][ T5323] lock_acquire+0x1ed/0x550 [ 70.746830][ T5323] fs_reclaim_acquire+0x88/0x130 [ 70.749144][ T5323] __kmalloc_noprof+0xae/0x4c0 [ 70.751278][ T5323] pcpu_create_chunk+0x57/0xbc0 [ 70.753255][ T5323] pcpu_balance_workfn+0xc4d/0xd40 [ 70.755335][ T5323] process_scheduled_works+0xabe/0x18e0 [ 70.757886][ T5323] worker_thread+0x870/0xd30 [ 70.760405][ T5323] kthread+0x7a9/0x920 [ 70.763011][ T5323] ret_from_fork+0x4b/0x80 [ 70.765620][ T5323] ret_from_fork_asm+0x1a/0x30 [ 70.767624][ T5323] [ 70.767624][ T5323] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 70.770471][ T5323] lock_acquire+0x1ed/0x550 [ 70.772410][ T5323] __mutex_lock+0x19c/0x1010 [ 70.774567][ T5323] pcpu_alloc_noprof+0x293/0x1760 [ 70.777229][ T5323] __six_lock_init+0x104/0x150 [ 70.779601][ T5323] bch2_btree_lock_init+0x38/0x100 [ 70.782302][ T5323] bch2_btree_node_mem_alloc+0x5b7/0x1780 [ 70.784919][ T5323] bch2_btree_reserve_get+0x308/0x19a0 [ 70.787219][ T5323] bch2_btree_update_start+0xe92/0x1540 [ 70.789561][ T5323] bch2_btree_split_leaf+0x121/0x880 [ 70.791816][ T5323] bch2_trans_commit_error+0x212/0x1380 [ 70.794413][ T5323] __bch2_trans_commit+0x8105/0x9790 [ 70.797179][ T5323] bch2_journal_replay+0x1ab1/0x2b10 [ 70.799641][ T5323] bch2_run_recovery_pass+0xf0/0x1e0 [ 70.801762][ T5323] bch2_run_recovery_passes+0x2ad/0xa90 [ 70.804170][ T5323] bch2_fs_recovery+0x265a/0x3de0 [ 70.806241][ T5323] bch2_fs_start+0x37c/0x610 [ 70.808097][ T5323] bch2_fs_get_tree+0xdb7/0x17a0 [ 70.810104][ T5323] vfs_get_tree+0x90/0x2b0 [ 70.812059][ T5323] do_new_mount+0x2be/0xb40 [ 70.814347][ T5323] __se_sys_mount+0x2d6/0x3c0 [ 70.816807][ T5323] do_syscall_64+0xf3/0x230 [ 70.819184][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.821947][ T5323] [ 70.821947][ T5323] -> #0 (&bc->lock){+.+.}-{4:4}: [ 70.824780][ T5323] validate_chain+0x18ef/0x5920 [ 70.826817][ T5323] __lock_acquire+0x1397/0x2100 [ 70.828808][ T5323] lock_acquire+0x1ed/0x550 [ 70.830830][ T5323] __mutex_lock+0x19c/0x1010 [ 70.832833][ T5323] bch2_btree_cache_scan+0x184/0xec0 [ 70.835371][ T5323] do_shrink_slab+0x72d/0x1160 [ 70.838042][ T5323] shrink_slab+0x1093/0x14d0 [ 70.840278][ T5323] shrink_one+0x43b/0x850 [ 70.842092][ T5323] shrink_node+0x379b/0x3e20 [ 70.844039][ T5323] do_try_to_free_pages+0x78c/0x1cf0 [ 70.846293][ T5323] try_to_free_pages+0x47c/0x1050 [ 70.848563][ T5323] __alloc_pages_direct_reclaim+0x178/0x3c0 [ 70.851339][ T5323] __alloc_pages_slowpath+0x811/0x10b0 [ 70.854043][ T5323] __alloc_frozen_pages_noprof+0x49b/0x710 [ 70.856750][ T5323] alloc_pages_mpol+0x311/0x660 [ 70.859027][ T5323] folio_alloc_mpol_noprof+0x36/0x70 [ 70.861151][ T5323] shmem_alloc_and_add_folio+0x4a0/0x1090 [ 70.863426][ T5323] shmem_get_folio_gfp+0x621/0x1840 [ 70.865602][ T5323] shmem_fault+0x220/0x5b0 [ 70.867533][ T5323] __do_fault+0x135/0x390 [ 70.869600][ T5323] __handle_mm_fault+0x4c44/0x70f0 [ 70.872211][ T5323] handle_mm_fault+0x3e5/0x8d0 [ 70.874573][ T5323] __get_user_pages+0x1a92/0x4140 [ 70.876699][ T5323] populate_vma_page_range+0x264/0x330 [ 70.879094][ T5323] __mm_populate+0x27a/0x460 [ 70.881007][ T5323] vm_mmap_pgoff+0x303/0x430 [ 70.882991][ T5323] do_syscall_64+0xf3/0x230 [ 70.885185][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.887989][ T5323] [ 70.887989][ T5323] other info that might help us debug this: [ 70.887989][ T5323] [ 70.892205][ T5323] Chain exists of: [ 70.892205][ T5323] &bc->lock --> pcpu_alloc_mutex --> fs_reclaim [ 70.892205][ T5323] [ 70.896662][ T5323] Possible unsafe locking scenario: [ 70.896662][ T5323] [ 70.899674][ T5323] CPU0 CPU1 [ 70.902380][ T5323] ---- ---- [ 70.905137][ T5323] lock(fs_reclaim); [ 70.906663][ T5323] lock(pcpu_alloc_mutex); [ 70.909304][ T5323] lock(fs_reclaim); [ 70.911716][ T5323] lock(&bc->lock); [ 70.913269][ T5323] [ 70.913269][ T5323] *** DEADLOCK *** [ 70.913269][ T5323] [ 70.916398][ T5323] 2 locks held by syz.0.0/5323: [ 70.918518][ T5323] #0: ffff8880124151e0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x1b0/0x460 [ 70.922799][ T5323] #1: ffffffff8ec3a200 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xd4/0x3c0 [ 70.926990][ T5323] [ 70.926990][ T5323] stack backtrace: [ 70.929302][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 70.929319][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.929327][ T5323] Call Trace: [ 70.929339][ T5323] [ 70.929348][ T5323] dump_stack_lvl+0x241/0x360 [ 70.929367][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.929382][ T5323] ? __pfx__printk+0x10/0x10 [ 70.929395][ T5323] print_circular_bug+0x13a/0x1b0 [ 70.929407][ T5323] check_noncircular+0x36a/0x4a0 [ 70.929419][ T5323] ? __pfx_check_noncircular+0x10/0x10 [ 70.929431][ T5323] ? lockdep_lock+0x123/0x2b0 [ 70.929448][ T5323] ? unwind_next_frame+0x18e6/0x22d0 [ 70.929464][ T5323] validate_chain+0x18ef/0x5920 [ 70.929473][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 70.929488][ T5323] ? unwind_get_return_address+0x4d/0x90 [ 70.929499][ T5323] ? arch_stack_walk+0xfd/0x150 [ 70.929508][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 70.929517][ T5323] ? stack_trace_save+0x118/0x1d0 [ 70.929528][ T5323] ? mark_lock+0x9a/0x360 [ 70.929535][ T5323] ? __lock_acquire+0x1397/0x2100 [ 70.929549][ T5323] ? mark_lock+0x9a/0x360 [ 70.929555][ T5323] ? reacquire_held_locks+0x3eb/0x690 [ 70.929564][ T5323] __lock_acquire+0x1397/0x2100 [ 70.929578][ T5323] lock_acquire+0x1ed/0x550 [ 70.929589][ T5323] ? bch2_btree_cache_scan+0x184/0xec0 [ 70.929602][ T5323] ? __pfx_lock_acquire+0x10/0x10 [ 70.929613][ T5323] ? __pfx_validate_chain+0x10/0x10 [ 70.929621][ T5323] ? __pfx___might_resched+0x10/0x10 [ 70.929632][ T5323] ? mark_lock+0x9a/0x360 [ 70.929639][ T5323] ? __lock_acquire+0x1397/0x2100 [ 70.929651][ T5323] __mutex_lock+0x19c/0x1010 [ 70.929663][ T5323] ? bch2_btree_cache_scan+0x184/0xec0 [ 70.929676][ T5323] ? bch2_btree_cache_scan+0x184/0xec0 [ 70.929686][ T5323] ? __pfx___mutex_lock+0x10/0x10 [ 70.929696][ T5323] ? __pfx_lock_acquire+0x10/0x10 [ 70.929707][ T5323] ? __lock_acquire+0x1397/0x2100 [ 70.929720][ T5323] bch2_btree_cache_scan+0x184/0xec0 [ 70.929734][ T5323] do_shrink_slab+0x72d/0x1160 [ 70.929752][ T5323] ? shrink_slab+0x12b/0x14d0 [ 70.929764][ T5323] shrink_slab+0x1093/0x14d0 [ 70.929776][ T5323] ? shrink_slab+0x12b/0x14d0 [ 70.929787][ T5323] ? __pfx_shrink_slab+0x10/0x10 [ 70.929800][ T5323] ? shrink_node+0x3546/0x3e20 [ 70.929811][ T5323] ? __pfx_lock_release+0x10/0x10 [ 70.929822][ T5323] shrink_one+0x43b/0x850 [ 70.929833][ T5323] ? shrink_node+0x3546/0x3e20 [ 70.929844][ T5323] shrink_node+0x379b/0x3e20 [ 70.929854][ T5323] ? shrink_node+0x3546/0x3e20 [ 70.929871][ T5323] ? mark_lock+0x9a/0x360 [ 70.929881][ T5323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.929899][ T5323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.929915][ T5323] ? queue_work_on+0x1e3/0x380 [ 70.929930][ T5323] ? queue_work_on+0x25f/0x380 [ 70.929941][ T5323] ? __pfx_shrink_node+0x10/0x10 [ 70.929953][ T5323] ? __pfx_queue_work_on+0x10/0x10 [ 70.929966][ T5323] ? __next_zones_zonelist+0xa2/0x130 [ 70.929976][ T5323] do_try_to_free_pages+0x78c/0x1cf0 [ 70.929989][ T5323] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 70.930001][ T5323] try_to_free_pages+0x47c/0x1050 [ 70.930011][ T5323] ? __pfx_try_to_free_pages+0x10/0x10 [ 70.930025][ T5323] ? fs_reclaim_acquire+0x93/0x130 [ 70.930035][ T5323] __alloc_pages_direct_reclaim+0x178/0x3c0 [ 70.930048][ T5323] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 70.930062][ T5323] __alloc_pages_slowpath+0x811/0x10b0 [ 70.930075][ T5323] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 70.930087][ T5323] __alloc_frozen_pages_noprof+0x49b/0x710 [ 70.930097][ T5323] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.930108][ T5323] ? cpuset_nodemask_valid_mems_allowed+0x6a/0x80 [ 70.930122][ T5323] alloc_pages_mpol+0x311/0x660 [ 70.930135][ T5323] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 70.930146][ T5323] ? filemap_get_entry+0x123/0x3b0 [ 70.930158][ T5323] ? __pfx_lock_release+0x10/0x10 [ 70.930171][ T5323] folio_alloc_mpol_noprof+0x36/0x70 [ 70.930183][ T5323] shmem_alloc_and_add_folio+0x4a0/0x1090 [ 70.930196][ T5323] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 70.930208][ T5323] ? shmem_allowable_huge_orders+0x40b/0x420 [ 70.930218][ T5323] shmem_get_folio_gfp+0x621/0x1840 [ 70.930231][ T5323] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 70.930245][ T5323] shmem_fault+0x220/0x5b0 [ 70.930259][ T5323] ? __pfx_shmem_fault+0x10/0x10 [ 70.930271][ T5323] ? __pfx_lock_release+0x10/0x10 [ 70.930290][ T5323] __do_fault+0x135/0x390 [ 70.930302][ T5323] __handle_mm_fault+0x4c44/0x70f0 [ 70.930319][ T5323] ? mark_lock+0x9a/0x360 [ 70.930332][ T5323] ? __pfx___handle_mm_fault+0x10/0x10 [ 70.930349][ T5323] ? __pfx_lock_acquire+0x10/0x10 [ 70.930365][ T5323] ? do_raw_spin_lock+0x14f/0x370 [ 70.930382][ T5323] ? follow_page_pte+0x25a/0x1460 [ 70.930392][ T5323] ? follow_page_pte+0x86a/0x1460 [ 70.930403][ T5323] ? __pfx_lock_release+0x10/0x10 [ 70.930420][ T5323] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.930436][ T5323] ? __pfx___might_resched+0x10/0x10 [ 70.930451][ T5323] handle_mm_fault+0x3e5/0x8d0 [ 70.930469][ T5323] __get_user_pages+0x1a92/0x4140 [ 70.930493][ T5323] ? __pfx___get_user_pages+0x10/0x10 [ 70.930510][ T5323] ? __pfx_mt_find+0x10/0x10 [ 70.930545][ T5323] populate_vma_page_range+0x264/0x330 [ 70.930567][ T5323] ? __pfx_populate_vma_page_range+0x10/0x10 [ 70.930583][ T5323] ? userfaultfd_unmap_complete+0x30c/0x360 [ 70.930597][ T5323] __mm_populate+0x27a/0x460 [ 70.930615][ T5323] ? __pfx___mm_populate+0x10/0x10 [ 70.930632][ T5323] vm_mmap_pgoff+0x303/0x430 [ 70.930644][ T5323] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 70.930653][ T5323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.930668][ T5323] ? do_syscall_64+0x100/0x230 [ 70.930689][ T5323] ? ksys_mmap_pgoff+0xdf/0x720 [ 70.930705][ T5323] ? __x64_sys_mmap+0x7f/0x140 [ 70.930722][ T5323] do_syscall_64+0xf3/0x230 [ 70.930738][ T5323] ? clear_bhb_loop+0x35/0x90 [ 70.930756][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.930776][ T5323] RIP: 0033:0x7fca3e38d169 [ 70.930791][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.930811][ T5323] RSP: 002b:00007fca3f1d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 70.930829][ T5323] RAX: ffffffffffffffda RBX: 00007fca3e5a5fa0 RCX: 00007fca3e38d169 [ 70.930838][ T5323] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 70.930849][ T5323] RBP: 00007fca3e40e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 70.930859][ T5323] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 70.930866][ T5323] R13: 0000000000000000 R14: 00007fca3e5a5fa0 R15: 00007ffcdcf1a118 [ 70.930877][ T5323] [ 71.539232][ T5323] syz.0.0 (5323) used greatest stack depth: 8464 bytes left