program:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x21}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x21}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
syz_mount_image$bcachefs(&(0x7f0000002340), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000002300)=ANY=[], 0x1, 0x5910, &(0x7f0000016480)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
link(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x3000}) (async)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x3000})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20200, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20200, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0)
[ 74.792141][ T5302] Bluetooth: hci0: command tx timeout
[ 75.147741][ T5322] loop0: detected capacity change from 0 to 32768
[ 75.283399][ T5322] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 75.283416][ T5322] allowing incompatible features above 0.0: (unknown version)
[ 75.283422][ T5322] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 75.302311][ T5322] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 75.306162][ T5322] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 75.309922][ T5322] bcachefs (loop0): Version upgrade required:
[ 75.309922][ T5322] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 75.309922][ T5322] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 75.309922][ T5322] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 75.407248][ T5322] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0:
[ 75.407274][ T5322] gen 0 oldest_gen 0 data_type btree
[ 75.407277][ T5322] journal_seq_nonempty 6
[ 75.407281][ T5322] journal_seq_empty 0
[ 75.407284][ T5322] need_discard 1
[ 75.407287][ T5322] need_inc_gen 1
[ 75.407290][ T5322] dirty_sectors 0
[ 75.407293][ T5322] stripe_sectors 1769482
[ 75.407296][ T5322] cached_sectors 0
[ 75.407299][ T5322] stripe 0
[ 75.407302][ T5322] stripe_redundancy 0
[ 75.407305][ T5322] io_time[READ] 1
[ 75.407308][ T5322] io_time[WRITE] 768
[ 75.407311][ T5322] fragmentation 0
[ 75.407314][ T5322] bp_start 7
[ 75.407318][ T5322]
[ 75.407322][ T5322] invalid data type (got 3 should be 9), deleting
[ 75.463527][ T5322] bcachefs (loop0): btree node read error at btree backpointers level 0/0
[ 75.463570][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 75.463578][ T5322] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 0 + 1099511627776 > 4294967295
[ 75.463585][ T5322] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:1099511627776, 0:0
[ 75.463591][ T5322] flagging btree backpointers lost data
[ 75.463597][ T5322] ret btree_node_read_validate_error
[ 75.494481][ T5322] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[ 75.503723][ T5322] bcachefs (loop0): check_topology... done
[ 75.507839][ T5322] bcachefs (loop0): accounting_read... done
[ 75.514332][ T5322] bcachefs (loop0): alloc_read... done
[ 75.517608][ T5322] bcachefs (loop0): snapshots_read... done
[ 75.520824][ T5322] bcachefs (loop0): check_allocations...
[ 75.526667][ T5322] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[ 75.526698][ T5322] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 75.545544][ T5322] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[ 75.545563][ T5322] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 75.558285][ T5322] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[ 75.558302][ T5322] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 75.574560][ T5322] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[ 75.574572][ T5322] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 75.587737][ T5322] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[ 75.587754][ T5322] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 75.599426][ T5322] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.604918][ T5322] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.610948][ T5322] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.616015][ T5322] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.622911][ T5322] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.627833][ T5322] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.633351][ T5322] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.637715][ T5322] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.643617][ T5322] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.647868][ T5322] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.655395][ T5322] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.659199][ T5322] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.664927][ T5322] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.669653][ T5322] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.676495][ T5322] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[ 75.680804][ T5322] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[ 75.686746][ T5322] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[ 75.691481][ T5322] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.698681][ T5322] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[ 75.706344][ T5322] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.711971][ T5322] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[ 75.711983][ T5322] Ratelimiting new instances of previous error
[ 75.720441][ T5322] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 75.720455][ T5322] Ratelimiting new instances of previous error
[ 75.743174][ T5322] done
[ 75.745273][ T5322] bcachefs (loop0): going read-write
[ 75.911287][ T5322] bcachefs (loop0): journal_replay... done
[ 75.954745][ T5322] bcachefs (loop0): check_alloc_info...
[ 75.955905][ T5322] bcachefs (loop0): hole in alloc btree missing in freespace btree
[ 75.955928][ T5322] device 0 buckets 28-29, fixing
[ 75.969599][ T5322] bcachefs (loop0): bucket incorrectly unset in need_discard btree
[ 75.969612][ T5322] u64s 13 type alloc_v4 0:37:0 len 0 ver 0:
[ 75.969620][ T5322] gen 0 oldest_gen 0 data_type need_discard
[ 75.969625][ T5322] journal_seq_nonempty 6
[ 75.969629][ T5322] journal_seq_empty 0
[ 75.969634][ T5322] need_discard 1
[ 75.969639][ T5322] need_inc_gen 1
[ 75.969644][ T5322] dirty_sectors 0
[ 75.969649][ T5322] stripe_sectors 0
[ 75.969655][ T5322] cached_sectors 0
[ 75.969659][ T5322] stripe 0
[ 75.969664][ T5322] stripe_redundancy 0
[ 75.969669][ T5322] io_time[READ] 1
[ 75.969674][ T5322] io_time[WRITE] 1024
[ 75.969679][ T5322] fragmentation 0
[ 75.969683][ T5322] bp_start 8
[ 75.969688][ T5322] , fixing
[ 76.027393][ T5322] done
[ 76.029599][ T5322] bcachefs (loop0): check_lrus... done
[ 76.033807][ T5322] bcachefs (loop0): check_btree_backpointers... done
[ 76.037572][ T5322] bcachefs (loop0): check_backpointers_to_extents... done
[ 76.042208][ T5322] bcachefs (loop0): check_extents_to_backpointers...
[ 76.042864][ T5322] bcachefs (loop0): scanning for missing backpointers in 10/128 buckets
[ 76.050120][ T5322] done
[ 76.054173][ T5322] bcachefs (loop0): check_alloc_to_lru_refs...
[ 76.056289][ T5322] bcachefs (loop0): missing fragmentation lru entry
[ 76.056301][ T5322] u64s 12 type alloc_v4 0:34:0 len 0 ver 0:
[ 76.056307][ T5322] gen 0 oldest_gen 0 data_type user
[ 76.056311][ T5322] journal_seq_nonempty 5
[ 76.056316][ T5322] journal_seq_empty 134217728
[ 76.056321][ T5322] need_discard 1
[ 76.056326][ T5322] need_inc_gen 1
[ 76.056331][ T5322] dirty_sectors 16
[ 76.056336][ T5322] stripe_sectors 1802251
[ 76.056341][ T5322] cached_sectors 0
[ 76.056346][ T5322] stripe 0
[ 76.056351][ T5322] stripe_redundancy 0
[ 76.056356][ T5322] io_time[READ] 1
[ 76.056360][ T5322] io_time[WRITE] 512
[ 76.056365][ T5322] fragmentation 0
[ 76.056369][ T5322] bp_start 7
[ 76.056374][ T5322] , fixing
[ 76.105424][ T5322] done
[ 76.107057][ T5322] bcachefs (loop0): bucket_gens_init... done
[ 76.118521][ T5322] bcachefs (loop0): check_snapshot_trees... done
[ 76.122693][ T5322] bcachefs (loop0): check_snapshots...
[ 76.123334][ T5322] bcachefs (loop0): snapshot points to missing/incorrect tree:
[ 76.123345][ T5322] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing
[ 76.145222][ T5322] done
[ 76.147093][ T5322] bcachefs (loop0): check_subvols... done
[ 76.157441][ T5322] bcachefs (loop0): check_subvol_children... done
[ 76.160314][ T5322] bcachefs (loop0): delete_dead_snapshots... done
[ 76.172063][ T5322] bcachefs (loop0): check_inodes... done
[ 76.175309][ T5322] bcachefs (loop0): check_extents... done
[ 76.178797][ T5322] bcachefs (loop0): check_indirect_extents... done
[ 76.192355][ T5322] bcachefs (loop0): check_dirents... done
[ 76.196661][ T5322] bcachefs (loop0): check_xattrs... done
[ 76.199977][ T5322] bcachefs (loop0): check_root... done
[ 76.221973][ T5322] bcachefs (loop0): check_unreachable_inodes... done
[ 76.225523][ T5322] bcachefs (loop0): check_subvolume_structure... done
[ 76.228660][ T5322] bcachefs (loop0): check_directory_structure... done
[ 76.241654][ T5322] bcachefs (loop0): check_nlinks... done
[ 76.244900][ T5322] bcachefs (loop0): check_rebalance_work... done
[ 76.247980][ T5322] bcachefs (loop0): resume_logged_ops... done
[ 76.250908][ T5322] bcachefs (loop0): delete_dead_inodes... done
[ 76.267400][ T5322] bcachefs (loop0): set_fs_needs_rebalance... done
[ 76.299269][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.302823][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.329777][ T5322] bcachefs (loop0): done starting filesystem
[ 76.375992][ T25] audit: type=1800 audit(1750698496.917:2): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=536870913 res=0 errno=0
[ 76.394046][ T5323] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[ 76.394046][ T5323] set version_upgrade=incompat to enable
[ 76.421161][ T25] audit: type=1800 audit(1750698496.937:3): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=536870913 res=0 errno=0
[ 76.465690][ T5322] ------------[ cut here ]------------
[ 76.468674][ T5322] truncate spotted in mem i_size < btree i_size: 9000 < 12288
[ 76.474757][ T25] audit: type=1804 audit(1750698497.007:4): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.0" name="/newroot/0/file0/file1" dev="loop0" ino=536870913 res=1 errno=0
[ 76.494643][ T5322] WARNING: CPU: 0 PID: 5322 at fs/bcachefs/fs-io.c:474 bchfs_truncate+0xa3b/0xc20
[ 76.498496][ T5322] Modules linked in:
[ 76.500559][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full)
[ 76.505129][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.509085][ T5322] RIP: 0010:bchfs_truncate+0xa3b/0xc20
[ 76.511527][ T5322] Code: 00 74 0a 48 8b 7c 24 20 e8 72 55 e9 fd 4c 8b 7c 24 20 49 8b 37 48 8b 94 24 00 01 00 00 48 c7 c7 c0 b6 d4 8b e8 e6 7c 49 fd 90 <0f> 0b 90 90 e9 95 fa ff ff e8 f7 d2 85 fd 4c 8b 7c 24 50 4c 89 ff
[ 76.519897][ T5322] RSP: 0018:ffffc9000d307540 EFLAGS: 00010246
[ 76.522646][ T5322] RAX: 618882162cc2da00 RBX: 1ffff1100867ea7b RCX: ffff888032d00000
[ 76.526132][ T5322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 76.529469][ T5322] RBP: ffffc9000d3077d0 R08: 0000000000000003 R09: 0000000000000004
[ 76.533217][ T5322] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880433f53d8
[ 76.536552][ T5322] R13: ffff8880433f5498 R14: 0000000000002328 R15: ffff8880433f4f80
[ 76.540146][ T5322] FS: 00007fe4451f56c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
[ 76.543809][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.546949][ T5322] CR2: 00007ffd22ba4f80 CR3: 0000000042788000 CR4: 0000000000352ef0
[ 76.551285][ T5322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 76.556282][ T5322] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 76.560364][ T5322] Call Trace:
[ 76.562473][ T5322]
[ 76.563786][ T5322] ? __pfx_bchfs_truncate+0x10/0x10
[ 76.566094][ T5322] ? __bch2_trans_get+0x9c2/0xd80
[ 76.568088][ T5322] ? __pfx_bch2_subvol_is_ro+0x10/0x10
[ 76.569932][ T5322] ? setattr_prepare+0x1e7/0xac0
[ 76.572185][ T5322] ? bch2_setattr+0x1a7/0x220
[ 76.574687][ T5322] ? __pfx_bch2_setattr+0x10/0x10
[ 76.576936][ T5322] notify_change+0xb36/0xe40
[ 76.578955][ T5322] do_truncate+0x1a4/0x220
[ 76.581613][ T5322] ? __pfx_do_truncate+0x10/0x10
[ 76.583856][ T5322] ? apparmor_file_truncate+0x23e/0x2d0
[ 76.586379][ T5322] path_openat+0x306c/0x3830
[ 76.588337][ T5322] ? arch_stack_walk+0xfc/0x150
[ 76.590774][ T5322] ? __pfx_path_openat+0x10/0x10
[ 76.593165][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.595941][ T5322] do_filp_open+0x1fa/0x410
[ 76.597979][ T5322] ? __lock_acquire+0xab9/0xd20
[ 76.600206][ T5322] ? __pfx_do_filp_open+0x10/0x10
[ 76.602616][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 76.604923][ T5322] ? alloc_fd+0x64c/0x6c0
[ 76.606844][ T5322] do_sys_openat2+0x121/0x1c0
[ 76.608911][ T5322] ? __pfx_do_sys_openat2+0x10/0x10
[ 76.612261][ T5322] ? rcu_is_watching+0x15/0xb0
[ 76.614364][ T5322] __x64_sys_openat+0x138/0x170
[ 76.616414][ T5322] do_syscall_64+0xfa/0x3b0
[ 76.618293][ T5322] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.620481][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.623006][ T5322] ? clear_bhb_loop+0x60/0xb0
[ 76.625093][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.627527][ T5322] RIP: 0033:0x7fe448d8e929
[ 76.629473][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.637739][ T5322] RSP: 002b:00007fe4451f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 76.641285][ T5322] RAX: ffffffffffffffda RBX: 00007fe448fb5fa0 RCX: 00007fe448d8e929
[ 76.644719][ T5322] RDX: 0000000000020200 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 76.647989][ T5322] RBP: 00007fe448e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 76.651282][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.654560][ T5322] R13: 0000000000000000 R14: 00007fe448fb5fa0 R15: 00007ffd22ba5b18
[ 76.657859][ T5322]
[ 76.659269][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.662256][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full)
[ 76.666102][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.670649][ T5322] Call Trace:
[ 76.672004][ T5322]
[ 76.673281][ T5322] dump_stack_lvl+0x99/0x250
[ 76.675266][ T5322] ? __asan_memcpy+0x40/0x70
[ 76.677200][ T5322] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.679308][ T5322] ? __pfx__printk+0x10/0x10
[ 76.681144][ T5322] panic+0x2db/0x790
[ 76.682692][ T5322] ? __pfx_panic+0x10/0x10
[ 76.684673][ T5322] ? show_trace_log_lvl+0x4fb/0x550
[ 76.687047][ T5322] __warn+0x31b/0x4b0
[ 76.688960][ T5322] ? bchfs_truncate+0xa3b/0xc20
[ 76.691314][ T5322] ? bchfs_truncate+0xa3b/0xc20
[ 76.693365][ T5322] report_bug+0x2be/0x4f0
[ 76.695158][ T5322] ? bchfs_truncate+0xa3b/0xc20
[ 76.697173][ T5322] ? bchfs_truncate+0xa3b/0xc20
[ 76.699208][ T5322] ? bchfs_truncate+0xa3d/0xc20
[ 76.701164][ T5322] handle_bug+0x84/0x160
[ 76.702835][ T5322] exc_invalid_op+0x1a/0x50
[ 76.704822][ T5322] asm_exc_invalid_op+0x1a/0x20
[ 76.706997][ T5322] RIP: 0010:bchfs_truncate+0xa3b/0xc20
[ 76.709475][ T5322] Code: 00 74 0a 48 8b 7c 24 20 e8 72 55 e9 fd 4c 8b 7c 24 20 49 8b 37 48 8b 94 24 00 01 00 00 48 c7 c7 c0 b6 d4 8b e8 e6 7c 49 fd 90 <0f> 0b 90 90 e9 95 fa ff ff e8 f7 d2 85 fd 4c 8b 7c 24 50 4c 89 ff
[ 76.717730][ T5322] RSP: 0018:ffffc9000d307540 EFLAGS: 00010246
[ 76.720278][ T5322] RAX: 618882162cc2da00 RBX: 1ffff1100867ea7b RCX: ffff888032d00000
[ 76.723619][ T5322] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 76.726978][ T5322] RBP: ffffc9000d3077d0 R08: 0000000000000003 R09: 0000000000000004
[ 76.730327][ T5322] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880433f53d8
[ 76.733910][ T5322] R13: ffff8880433f5498 R14: 0000000000002328 R15: ffff8880433f4f80
[ 76.737611][ T5322] ? __pfx_bchfs_truncate+0x10/0x10
[ 76.740070][ T5322] ? __bch2_trans_get+0x9c2/0xd80
[ 76.742406][ T5322] ? __pfx_bch2_subvol_is_ro+0x10/0x10
[ 76.744981][ T5322] ? setattr_prepare+0x1e7/0xac0
[ 76.747104][ T5322] ? bch2_setattr+0x1a7/0x220
[ 76.749209][ T5322] ? __pfx_bch2_setattr+0x10/0x10
[ 76.751359][ T5322] notify_change+0xb36/0xe40
[ 76.753385][ T5322] do_truncate+0x1a4/0x220
[ 76.755437][ T5322] ? __pfx_do_truncate+0x10/0x10
[ 76.757606][ T5322] ? apparmor_file_truncate+0x23e/0x2d0
[ 76.759982][ T5322] path_openat+0x306c/0x3830
[ 76.762078][ T5322] ? arch_stack_walk+0xfc/0x150
[ 76.764459][ T5322] ? __pfx_path_openat+0x10/0x10
[ 76.766670][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.769192][ T5322] do_filp_open+0x1fa/0x410
[ 76.771066][ T5322] ? __lock_acquire+0xab9/0xd20
[ 76.773262][ T5322] ? __pfx_do_filp_open+0x10/0x10
[ 76.775480][ T5322] ? _raw_spin_unlock+0x28/0x50
[ 76.777730][ T5322] ? alloc_fd+0x64c/0x6c0
[ 76.779637][ T5322] do_sys_openat2+0x121/0x1c0
[ 76.781696][ T5322] ? __pfx_do_sys_openat2+0x10/0x10
[ 76.784083][ T5322] ? rcu_is_watching+0x15/0xb0
[ 76.786261][ T5322] __x64_sys_openat+0x138/0x170
[ 76.788426][ T5322] do_syscall_64+0xfa/0x3b0
[ 76.790535][ T5322] ? lockdep_hardirqs_on+0x9c/0x150
[ 76.793089][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.796044][ T5322] ? clear_bhb_loop+0x60/0xb0
[ 76.798366][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.800747][ T5322] RIP: 0033:0x7fe448d8e929
[ 76.803054][ T5322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.811701][ T5322] RSP: 002b:00007fe4451f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 76.815942][ T5322] RAX: ffffffffffffffda RBX: 00007fe448fb5fa0 RCX: 00007fe448d8e929
[ 76.819458][ T5322] RDX: 0000000000020200 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 76.822779][ T5322] RBP: 00007fe448e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 76.826609][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.830724][ T5322] R13: 0000000000000000 R14: 00007fe448fb5fa0 R15: 00007ffd22ba5b18
[ 76.834579][ T5322]
[ 76.843016][ T5322] Kernel Offset: disabled
[ 76.845022][ T5322] Rebooting in 86400 seconds..