program: syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800000, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYRES32], 0xfd, 0x5ad5, &(0x7f0000010200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4042, 0x111) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000214e224e0000", 0x58}], 0x1) [ 74.408040][ T4689] Bluetooth: hci0: command tx timeout [ 74.664717][ T5339] loop0: detected capacity change from 0 to 32768 [ 74.777143][ T5339] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 74.777164][ T5339] allowing incompatible features above 0.0: (unknown version) [ 74.777172][ T5339] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.804347][ T5339] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 74.809033][ T5339] bcachefs (loop0): initializing new filesystem [ 74.820744][ T5339] bcachefs (loop0): going read-write [ 74.828800][ T5339] bcachefs (loop0): marking superblocks [ 74.844993][ T5339] bcachefs (loop0): initializing freespace [ 74.852027][ T5339] bcachefs (loop0): done initializing freespace [ 74.859663][ T5339] bcachefs (loop0): reading snapshots table [ 74.862131][ T5339] bcachefs (loop0): reading snapshots done [ 74.878797][ T5339] bcachefs (loop0): done starting filesystem [ 74.922578][ T25] audit: type=1800 audit(1752355475.854:2): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file0" dev="loop0" ino=4098 res=0 errno=0 [ 74.973681][ T25] audit: type=1800 audit(1752355475.904:3): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file7" dev="loop0" ino=4104 res=0 errno=0 [ 74.990640][ T5339] ================================================================== [ 74.993966][ T5339] BUG: KASAN: slab-out-of-bounds in bch2_dirent_init_name+0x396/0x8b0 [ 74.997343][ T5339] Write of size 1985 at addr ffff888033392041 by task syz.0.0/5339 [ 75.000654][ T5339] [ 75.001683][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 75.001699][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.001706][ T5339] Call Trace: [ 75.001714][ T5339] [ 75.001720][ T5339] dump_stack_lvl+0x189/0x250 [ 75.001738][ T5339] ? __kasan_check_byte+0x12/0x40 [ 75.001753][ T5339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.001766][ T5339] ? lock_release+0x4b/0x3e0 [ 75.001778][ T5339] ? __virt_addr_valid+0x4a5/0x5c0 [ 75.001792][ T5339] print_report+0xca/0x230 [ 75.001803][ T5339] ? bch2_dirent_init_name+0x396/0x8b0 [ 75.001815][ T5339] kasan_report+0x118/0x150 [ 75.001831][ T5339] ? bch2_dirent_init_name+0x396/0x8b0 [ 75.001844][ T5339] kasan_check_range+0x2b0/0x2c0 [ 75.001858][ T5339] __asan_memset+0x22/0x50 [ 75.001866][ T5339] bch2_dirent_init_name+0x396/0x8b0 [ 75.001875][ T5339] bch2_dirent_create_key+0x2a1/0x5f0 [ 75.001884][ T5339] bch2_dirent_create+0xc5/0xc80 [ 75.001892][ T5339] ? __pfx_bch2_btree_iter_peek_slot+0x10/0x10 [ 75.001904][ T5339] ? bch2_trans_iter_init_outlined+0x1fe/0x400 [ 75.001915][ T5339] ? bch2_varint_decode_fast+0x88/0x190 [ 75.001926][ T5339] ? bch2_inode_unpack+0x264e/0x2810 [ 75.001939][ T5339] ? __pfx_bch2_dirent_create+0x10/0x10 [ 75.001949][ T5339] ? __pfx_bch2_inode_unpack+0x10/0x10 [ 75.001962][ T5339] ? __bch2_subvolume_get_snapshot+0x15c/0x550 [ 75.001975][ T5339] ? __asan_memset+0x22/0x50 [ 75.001986][ T5339] ? bch2_hash_info_init+0x26f/0x3b0 [ 75.001999][ T5339] ? __pfx_bch2_hash_info_init+0x10/0x10 [ 75.002014][ T5339] bch2_link_trans+0x39e/0x560 [ 75.002028][ T5339] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.002089][ T5339] ? __pfx_bch2_link_trans+0x10/0x10 [ 75.002104][ T5339] ? __bch2_inode_peek+0x11f/0x370 [ 75.002119][ T5339] ? __bch2_inode_peek+0x11f/0x370 [ 75.002132][ T5339] ? __pfx_bch2_trans_begin+0x10/0x10 [ 75.002148][ T5339] ? __bch2_trans_get+0x9c2/0xd80 [ 75.002162][ T5339] __bch2_link+0x231/0x3f0 [ 75.002177][ T5339] ? __pfx___bch2_link+0x10/0x10 [ 75.002192][ T5339] ? __bch2_trans_get+0x9c2/0xd80 [ 75.002218][ T5339] ? __pfx_from_kgid+0x10/0x10 [ 75.002239][ T5339] bch2_link+0x197/0x220 [ 75.002251][ T5339] vfs_link+0x4ea/0x6e0 [ 75.002267][ T5339] do_linkat+0x272/0x560 [ 75.002281][ T5339] ? __pfx_do_linkat+0x10/0x10 [ 75.002295][ T5339] ? getname_flags+0x1e5/0x540 [ 75.002311][ T5339] __x64_sys_linkat+0xd4/0xf0 [ 75.002325][ T5339] do_syscall_64+0xfa/0x3b0 [ 75.002336][ T5339] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.002351][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.002361][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 75.002373][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.002385][ T5339] RIP: 0033:0x7f03ed18e929 [ 75.002397][ T5339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.002406][ T5339] RSP: 002b:00007f03edfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 75.002419][ T5339] RAX: ffffffffffffffda RBX: 00007f03ed3b5fa0 RCX: 00007f03ed18e929 [ 75.002427][ T5339] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 75.002440][ T5339] RBP: 00007f03ed210b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.002447][ T5339] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 75.002455][ T5339] R13: 0000000000000000 R14: 00007f03ed3b5fa0 R15: 00007ffcc4060738 [ 75.002468][ T5339] [ 75.002472][ T5339] [ 75.143243][ T5339] Allocated by task 5339: [ 75.145190][ T5339] kasan_save_track+0x3e/0x80 [ 75.147268][ T5339] __kasan_kmalloc+0x93/0xb0 [ 75.149293][ T5339] __kmalloc_noprof+0x27a/0x4f0 [ 75.151409][ T5339] __bch2_trans_kmalloc+0x396/0x9d0 [ 75.153676][ T5339] bch2_dirent_create_key+0x113/0x5f0 [ 75.156044][ T5339] bch2_dirent_create+0xc5/0xc80 [ 75.158200][ T5339] bch2_link_trans+0x39e/0x560 [ 75.160265][ T5339] __bch2_link+0x231/0x3f0 [ 75.162216][ T5339] bch2_link+0x197/0x220 [ 75.164103][ T5339] vfs_link+0x4ea/0x6e0 [ 75.165946][ T5339] do_linkat+0x272/0x560 [ 75.167801][ T5339] __x64_sys_linkat+0xd4/0xf0 [ 75.169907][ T5339] do_syscall_64+0xfa/0x3b0 [ 75.171926][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.174473][ T5339] [ 75.175530][ T5339] The buggy address belongs to the object at ffff888033392000 [ 75.175530][ T5339] which belongs to the cache kmalloc-2k of size 2048 [ 75.181567][ T5339] The buggy address is located 65 bytes inside of [ 75.181567][ T5339] allocated 2048-byte region [ffff888033392000, ffff888033392800) [ 75.187488][ T5339] [ 75.188618][ T5339] The buggy address belongs to the physical page: [ 75.191023][ T5339] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33390 [ 75.194812][ T5339] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 75.198543][ T5339] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 75.202078][ T5339] page_type: f5(slab) [ 75.203793][ T5339] raw: 04fff00000000040 ffff88801a442000 0000000000000000 0000000000000001 [ 75.207496][ T5339] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 75.211551][ T5339] head: 04fff00000000040 ffff88801a442000 0000000000000000 0000000000000001 [ 75.214974][ T5339] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 75.218393][ T5339] head: 04fff00000000003 ffffea0000cce401 00000000ffffffff 00000000ffffffff [ 75.222311][ T5339] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 75.226152][ T5339] page dumped because: kasan: bad access detected [ 75.229096][ T5339] page_owner tracks the page as allocated [ 75.231637][ T5339] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5318, tgid 5318 (syz-executor), ts 72038083626, free_ts 51147467493 [ 75.241537][ T5339] post_alloc_hook+0x240/0x2a0 [ 75.243659][ T5339] get_page_from_freelist+0x21e4/0x22c0 [ 75.246166][ T5339] __alloc_frozen_pages_noprof+0x181/0x370 [ 75.248663][ T5339] alloc_pages_mpol+0x232/0x4a0 [ 75.250814][ T5339] allocate_slab+0x8a/0x3b0 [ 75.252723][ T5339] ___slab_alloc+0xbfc/0x1480 [ 75.254758][ T5339] __kmalloc_cache_noprof+0x296/0x3d0 [ 75.257207][ T5339] rxrpc_alloc_connection+0x7b/0x590 [ 75.259497][ T5339] rxrpc_prealloc_service_connection+0x26/0x2e0 [ 75.262113][ T5339] rxrpc_service_prealloc_one+0x2f5/0xe20 [ 75.264523][ T5339] afs_charge_preallocation+0x394/0x4e0 [ 75.266889][ T5339] afs_open_socket+0x302/0x3a0 [ 75.269027][ T5339] afs_net_init+0x67d/0x880 [ 75.271274][ T5339] ops_init+0x359/0x5c0 [ 75.273582][ T5339] setup_net+0x219/0x4b0 [ 75.275375][ T5339] copy_net_ns+0x31b/0x4d0 [ 75.277285][ T5339] page last free pid 5135 tgid 5135 stack trace: [ 75.280058][ T5339] __free_frozen_pages+0xc71/0xe70 [ 75.282166][ T5339] __slab_free+0x326/0x400 [ 75.284035][ T5339] qlist_free_all+0x97/0x140 [ 75.285901][ T5339] kasan_quarantine_reduce+0x148/0x160 [ 75.288013][ T5339] __kasan_slab_alloc+0x22/0x80 [ 75.290097][ T5339] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 75.292589][ T5339] dup_task_struct+0x52/0x860 [ 75.294583][ T5339] copy_process+0x544/0x3b80 [ 75.296612][ T5339] kernel_clone+0x21e/0x870 [ 75.298526][ T5339] __x64_sys_clone+0x18b/0x1e0 [ 75.300578][ T5339] do_syscall_64+0xfa/0x3b0 [ 75.302537][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.305291][ T5339] [ 75.306377][ T5339] Memory state around the buggy address: [ 75.308813][ T5339] ffff888033392700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.312144][ T5339] ffff888033392780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.315244][ T5339] >ffff888033392800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.318345][ T5339] ^ [ 75.320026][ T5339] ffff888033392880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.323291][ T5339] ffff888033392900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.326827][ T5339] ================================================================== [ 75.346229][ T5339] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.349245][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 75.354238][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.358683][ T5339] Call Trace: [ 75.360108][ T5339] [ 75.361354][ T5339] dump_stack_lvl+0x99/0x250 [ 75.363381][ T5339] ? __asan_memcpy+0x40/0x70 [ 75.365350][ T5339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.367609][ T5339] ? __pfx__printk+0x10/0x10 [ 75.369548][ T5339] panic+0x2db/0x790 [ 75.371087][ T5339] ? __pfx_panic+0x10/0x10 [ 75.373157][ T5339] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 75.375755][ T5339] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.378482][ T5339] ? print_memory_metadata+0x314/0x400 [ 75.380638][ T5339] ? bch2_dirent_init_name+0x396/0x8b0 [ 75.382411][ T5339] check_panic_on_warn+0x89/0xb0 [ 75.384251][ T5339] ? bch2_dirent_init_name+0x396/0x8b0 [ 75.386210][ T5339] end_report+0x78/0x160 [ 75.387972][ T5339] kasan_report+0x129/0x150 [ 75.389984][ T5339] ? bch2_dirent_init_name+0x396/0x8b0 [ 75.392201][ T5339] kasan_check_range+0x2b0/0x2c0 [ 75.394088][ T5339] __asan_memset+0x22/0x50 [ 75.395893][ T5339] bch2_dirent_init_name+0x396/0x8b0 [ 75.398219][ T5339] bch2_dirent_create_key+0x2a1/0x5f0 [ 75.400425][ T5339] bch2_dirent_create+0xc5/0xc80 [ 75.402922][ T5339] ? __pfx_bch2_btree_iter_peek_slot+0x10/0x10 [ 75.405683][ T5339] ? bch2_trans_iter_init_outlined+0x1fe/0x400 [ 75.408363][ T5339] ? bch2_varint_decode_fast+0x88/0x190 [ 75.410815][ T5339] ? bch2_inode_unpack+0x264e/0x2810 [ 75.412970][ T5339] ? __pfx_bch2_dirent_create+0x10/0x10 [ 75.415121][ T5339] ? __pfx_bch2_inode_unpack+0x10/0x10 [ 75.417231][ T5339] ? __bch2_subvolume_get_snapshot+0x15c/0x550 [ 75.419820][ T5339] ? __asan_memset+0x22/0x50 [ 75.421801][ T5339] ? bch2_hash_info_init+0x26f/0x3b0 [ 75.424014][ T5339] ? __pfx_bch2_hash_info_init+0x10/0x10 [ 75.426370][ T5339] bch2_link_trans+0x39e/0x560 [ 75.428439][ T5339] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 75.431137][ T5339] ? __pfx_bch2_link_trans+0x10/0x10 [ 75.433376][ T5339] ? __bch2_inode_peek+0x11f/0x370 [ 75.435598][ T5339] ? __bch2_inode_peek+0x11f/0x370 [ 75.437758][ T5339] ? __pfx_bch2_trans_begin+0x10/0x10 [ 75.439989][ T5339] ? __bch2_trans_get+0x9c2/0xd80 [ 75.442037][ T5339] __bch2_link+0x231/0x3f0 [ 75.444073][ T5339] ? __pfx___bch2_link+0x10/0x10 [ 75.446215][ T5339] ? __bch2_trans_get+0x9c2/0xd80 [ 75.448410][ T5339] ? __pfx_from_kgid+0x10/0x10 [ 75.450701][ T5339] bch2_link+0x197/0x220 [ 75.452885][ T5339] vfs_link+0x4ea/0x6e0 [ 75.454872][ T5339] do_linkat+0x272/0x560 [ 75.456745][ T5339] ? __pfx_do_linkat+0x10/0x10 [ 75.458851][ T5339] ? getname_flags+0x1e5/0x540 [ 75.460835][ T5339] __x64_sys_linkat+0xd4/0xf0 [ 75.462829][ T5339] do_syscall_64+0xfa/0x3b0 [ 75.464758][ T5339] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.466853][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.469389][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 75.471362][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.473910][ T5339] RIP: 0033:0x7f03ed18e929 [ 75.475834][ T5339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.484212][ T5339] RSP: 002b:00007f03edfc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 75.487734][ T5339] RAX: ffffffffffffffda RBX: 00007f03ed3b5fa0 RCX: 00007f03ed18e929 [ 75.491120][ T5339] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 75.494719][ T5339] RBP: 00007f03ed210b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.498230][ T5339] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 75.501458][ T5339] R13: 0000000000000000 R14: 00007f03ed3b5fa0 R15: 00007ffcc4060738 [ 75.504851][ T5339] [ 75.506758][ T5339] Kernel Offset: disabled [ 75.509093][ T5339] Rebooting in 86400 seconds..